PT-2019-19089 · Apple · Ios

Ryan Pickren · Publicado 2019-12-18 · Atualizado 2020-08-24 · CVE-2019-8554

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.2

Description A permissions issue existed in the handling of motion and orientation data, allowing a website to access sensor information without user consent. This issue was addressed with improved restrictions.

Recommendations For iOS versions prior to 12.2, update to iOS 12.2 to resolve the issue.

Correção

Identificadores relacionados

CVE-2019-8554

Produtos afetados

Ios

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-8554 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-8554 · Nota de Segurança
• https://support.apple.com/HT209599 · Aviso do Fabricante