| Vulnerability Name: | CVE-2020-9968 | ||||||||||||
| Assigned: | 2020-10-16 | ||||||||||||
| Published: | 2020-10-16 | ||||||||||||
| Updated: | 2023-01-09 | ||||||||||||
| Summary: | |||||||||||||
| CVSS v3 Severity: | 5.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
| ||||||||||||
| CVSS v2 Severity: | 4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N)
| ||||||||||||
| References: | Source: MITRE Type: CNA CVE-2020-9968 Source: product-security@apple.com Type: Mailing List, Third Party Advisory product-security@apple.com Source: product-security@apple.com Type: Mailing List, Third Party Advisory product-security@apple.com Source: product-security@apple.com Type: Mailing List, Third Party Advisory product-security@apple.com Source: product-security@apple.com Type: Mailing List, Third Party Advisory product-security@apple.com Source: product-security@apple.com Type: Release Notes, Vendor Advisory product-security@apple.com Source: product-security@apple.com Type: Release Notes, Vendor Advisory product-security@apple.com Source: product-security@apple.com Type: Release Notes, Vendor Advisory product-security@apple.com Source: product-security@apple.com Type: Release Notes, Vendor Advisory product-security@apple.com | ||||||||||||
| Vulnerability Name: | CVE-2020-9968 (CCN-188414) | ||||||||||||
| Assigned: | 2020-09-16 | ||||||||||||
| Published: | 2020-09-16 | ||||||||||||
| Updated: | 2020-11-15 | ||||||||||||
| Summary: | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 14.0 and iPadOS 14.0, macOS Catalina 10.15.7, tvOS 14.0, watchOS 7.0. A malicious application may be able to access restricted files. | ||||||||||||
| CVSS v3 Severity: | 5.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) 4.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)
5.4 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C)
| ||||||||||||
| CVSS v2 Severity: | 4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N)
| ||||||||||||
| Vulnerability Type: | CWE-noinfo | ||||||||||||
| Vulnerability Consequences: | Bypass Security | ||||||||||||
| References: | Source: MITRE Type: CNA CVE-2020-9968 Source: FULLDISC Type: UNKNOWN 20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0 Source: FULLDISC Type: UNKNOWN 20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0 Source: FULLDISC Type: UNKNOWN 20201115 APPLE-SA-2020-11-13-7 Additional information for APPLE-SA-2020-09-24-1 macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave Source: FULLDISC Type: UNKNOWN 20201115 APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0 Source: XF Type: UNKNOWN apple-watchos-cve20209968-sec-bypass(188414) Source: CCN Type: Apple security document HT211843 About the security content of tvOS 14.0 Source: CCN Type: Apple security document HT211844 About the security content of watchOS 7.0 Source: CCN Type: Apple security document HT211849 About the security content of macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave Source: CCN Type: Apple security document HT211850 About the security content of iOS 14.0 and iPadOS 14.0 Source: MISC Type: Release Notes, Vendor Advisory https://support.apple.com/HT211843 Source: MISC Type: Release Notes, Vendor Advisory https://support.apple.com/HT211844 Source: MISC Type: Release Notes, Vendor Advisory https://support.apple.com/HT211849 Source: MISC Type: Release Notes, Vendor Advisory https://support.apple.com/HT211850 | ||||||||||||
| Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||||||||
| BACK | |||||||||||||