CVE-2020-12270

🗓️ 27 Apr 2020 03:26:40Reported by mitreType

React Native Bluetooth Scan in Bluezone 1.0.0 uses six-character alphanumeric IDs, posing a risk to COVID-19 contact tracing. Vendor disputes the relevance due to recipient knowledge of false alerts

Reporter	Title	Published	Views	Family All 8
BDU FSTEC	The vulnerability of the React Native Bluetooth Scan component of the Bluezone application, which allows a intruder to gain unauthorized access to protected information.	13 Sep 202300:00	–	bdu_fstec
CNVD	Bluezone Security Feature Issue Vulnerability	27 Apr 202000:00	–	cnvd
CVE	CVE-2020-12270	27 Apr 202003:26	–	cve
NVD	CVE-2020-12270	27 Apr 202004:15	–	nvd
OSV	CVE-2020-12270	27 Apr 202004:15	–	osv
Prion	Design/Logic Flaw	27 Apr 202004:15	–	prion
Positive Technologies	PT-2020-6904 · Unknown +1 · React Native Bluetooth Scan +1	27 Apr 202000:00	–	ptsecurity
RedhatCVE	CVE-2020-12270	22 May 202517:49	–	redhatcve

Source	Link
github	www.github.com/BluezoneGlobal/react-native-bluetooth-scan/blob/d9ee70fd594093a30e50b6e62a7593a8397c2dab/lib/android/src/main/AndroidManifest.xml
github	www.github.com/BluezoneGlobal/react-native-bluetooth-scan/blob/d9ee70fd594093a30e50b6e62a7593a8397c2dab/lib/android/src/main/java/com/scan/BluezonerIdGenerator.java
github	www.github.com/BluezoneGlobal/bluezone-app/blob/afa15fcec391f0edc51d0486a4ca84dd2520bbb3/CHANGELOG.md
vnhacker	www.vnhacker.blogspot.com/2020/04/vietnams-contact-tracing-app_26.html
bluezone	www.bluezone.ai/CVE
github	www.github.com/BluezoneGlobal/react-native-bluetooth-scan/blob/d9ee70fd594093a30e50b6e62a7593a8397c2dab/lib/android/src/main/java/com/scan/TraceCovidModule.java
github	www.github.com/BluezoneGlobal/bluezone-app/blob/afa15fcec391f0edc51d0486a4ca84dd2520bbb3/package.json

06 May 2020 11:55Current

6.5Medium risk

Vulners AI Score6.5

EPSS0.01432