Approved changes feed: RSS · Atom

cpe:2.3:a:health:covidsafe:-:*:*:*:*:iphone_os:*:*

part: a version: - update: *

VendorHealth (d8354e2c-f30f-5e38-9d9a-76734f115665)
ProductCovidsafe (2b3a93c1-0fbe-57d6-bb92-9e829f24793a)
Edition*
Language*
Software edition*
Target softwareiphone_os
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-12860 vulnerable 2026-06-08 05:17:59.468801 Details available
COVIDSafe through v1.0.17 allows a remote attacker to access phone name and model information because a BLE device can have four roles and COVIDSafe uses all of them. This allows for re-identification of a device, and potentially identification of the owner's name.
Published: 2020-05-18T04:20:34.000Z
Updated: 2024-08-04T12:04:22.882Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12856 vulnerable 2026-06-08 05:17:59.466770 Details available
OpenTrace, as used in COVIDSafe through v1.0.17, TraceTogether, ABTraceTogether, and other applications on iOS and Android, allows remote attackers to conduct long-term re-identification attacks and possibly have unspecified other impact, because of how Bluetooth is used.
Published: 2020-05-18T03:35:36.000Z
Updated: 2024-08-04T12:04:22.959Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.