PT-2019-19205 · Apple+6 · Ios+7

Eliya Stein

·

Publicado

2019-10-29

·

Atualizado

2024-06-15

·

CVE-2019-8771

CVSS v3.1

6.1

Média

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Safari versions prior to 13.0.1 iOS versions prior to 13
Description This issue allows maliciously crafted web content to violate iframe sandboxing policy due to inadequate iframe sandbox enforcement. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.
Recommendations For Safari versions prior to 13.0.1, update to Safari 13.0.1 or later to resolve the issue. For iOS versions prior to 13, update to iOS 13 or later to resolve the issue.

Exploit

Correção

Clickjacking

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-1021

Identificadores relacionados

ALSA-2020:4451
CESA-2020_4035
CESA-2020_4451
CVE-2019-8771
DSA-4558-1
MGASA-2019-0324
OPENSUSE-SU-2019:2587-1
OPENSUSE-SU-2019:2591-1
OPENSUSE-SU-2019_2587-1
OPENSUSE-SU-2019_2591-1
OPENSUSE-SU-2024:11506-1
RHSA-2020:4035
RHSA-2020:4451
RHSA-2020_4035
RHSA-2020_4451
RLSA-2020:4451
SUSE-SU-2019:3044-1
SUSE-SU-2020:1135-1
USN-4178-1

Produtos afetados

Almalinux
Centos
Red Hat
Rocky Linux
Safari
Suse
Ubuntu
Ios