CVE-2020-12856

OpenTrace, as used in COVIDSafe through v1.0.17, TraceTogether, ABTraceTogether, and other applications on iOS and Android, allows remote attackers to conduct long-term re-identification attacks and possibly have unspecified other impact, because of how Bluetooth is used...

PT-2020-13302

Name of the Vulnerable Software and Affected Versions COVIDSafe versions 1.0.15 through 1.0.16 Description The issue allows a remote attacker to long-term re-identify an Android device running COVIDSafe due to the caching of GATT characteristic values TempID. Recommendations For COVIDSafe version...

CVE-2020-12858: Use of Insufficiently Random Values

Non-reinitialisation of random data in the advertising payload in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to re-identify Android devices running COVIDSafe by scanning for their advertising beacons...

CVE-2020-12860: Improper Privilege Management

COVIDSafe through v1.0.17 allows a remote attacker to access phone name and model information because a BLE device can have four roles and COVIDSafe uses all of them. This allows for re-identification of a device, and potentially identification of the owner's name...

CVE-2020-12856: Undefined Security Weakness

OpenTrace, as used in COVIDSafe through v1.0.17, TraceTogether, ABTraceTogether, and other applications on iOS and Android, allows remote attackers to conduct long-term re-identification attacks and possibly have unspecified other impact, because of how Bluetooth is used...

PT-2020-13305

Name of the Vulnerable Software and Affected Versions COVIDSafe versions through v1.0.17 Description The issue allows a remote attacker to access phone name and model information. This is possible because a BLE device can have four roles and COVIDSafe uses all of them, enabling re-identification ...

PT-2020-13301

Name of the Vulnerable Software and Affected Versions OpenTrace versions prior to 1.0.18 COVIDSafe versions prior to 1.0.18 TraceTogether versions prior to 1.0.18 ABTraceTogether versions prior to 1.0.18 Description The issue allows remote attackers to conduct long-term re-identification attacks...

PT-2020-13303

Name of the Vulnerable Software and Affected Versions COVIDSafe versions 1.0.15 through 1.0.16 Description The issue concerns non-reinitialisation of random data in the advertising payload, allowing a remote attacker to re-identify Android devices running COVIDSafe by scanning for their advertisi...

Vulnerability Identified in Genomic Data Sharing Network

A vulnerability in a network that processes genomic data could pave the way to some global genetic databases being hacked, and open the door to some serious privacy issues. Experts claim the problem lies in The Beacon Project, a network run by a coalition, Global Alliance for Genomics and Health,...