PT-2019-19197 · Apple · Ios

Wish Wu + 1 · Publicado 2019-12-18 · Atualizado 2020-08-24 · CVE-2019-8760

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Média

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iOS versions prior to 13

Description The issue allowed a 3D model constructed to look like the enrolled user to authenticate via Face ID. This was addressed by improving Face ID machine learning models.

Recommendations For iOS versions prior to 13, update to iOS 13 to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2019-8760

Produtos afetados

Ios

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-8760 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-8760 · Aviso do Fabricante
• https://support.apple.com/HT210606 · Aviso do Fabricante