VYPR

ABTraceTogether

by Alberta

CVEs (2)

  • CVE-2020-12856CriMay 18, 2020
    risk 0.64cvss 9.8epss 0.05

    OpenTrace, as used in COVIDSafe through v1.0.17, TraceTogether, ABTraceTogether, and other applications on iOS and Android, allows remote attackers to conduct long-term re-identification attacks and possibly have unspecified other impact, because of how Bluetooth is used.

  • CVE-2020-12717MedMay 14, 2020
    risk 0.42cvss 6.5epss 0.01

    The COVIDSafe (Australia) app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere with COVID-19 contact tracing, via a Bluetooth advertisement containing manufacturer data that is too short. This occurs because of an erroneous OpenTrace…