AU-COVIDSafe/mobile-android

AU-COVIDSafe/mobile-android

GitHubGitHub
GitHubgithub.com
play.google.complay.google.com
Releases0
Stars352
COVIDSafe android app
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-14292↗
5.7 MEDIUM2.9 LOW

In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone without authorisation, bypassing the Bluetooth address randomisation protection in the user's phone.