Apple iOS

CVE-2020-3918
MEDIUM 5.5

En bref

Source
NVD
EPSS
EPSS 0.29 % · centile 22 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
apple
Statut NVD
Modified

Description

An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A local user may be able to view sensitive user information.

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NNVD · nvd@nist.gov (Primary)
CVSS 2.0LOW 2.1AV:L/AC:L/Au:N/C:P/I:N/A:NNVD · nvd@nist.gov (Primary)

Références européennes

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
Apple · iOSaffected unspecified < iOS 13.4 and iPadOS 13.4
Apple · macOSaffected unspecified < macOS Catalina 10.15.4
Apple · tvOSaffected unspecified < tvOS 13.4
Apple · watchOSaffected unspecified < watchOS 6.2

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD