PT-2019-19089 · Apple · Ios

Ryan Pickren · Published 2019-12-18 · Updated 2020-08-24 · CVE-2019-8554

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.2

Description A permissions issue existed in the handling of motion and orientation data, allowing a website to access sensor information without user consent. This issue was addressed with improved restrictions.

Recommendations For iOS versions prior to 12.2, update to iOS 12.2 to resolve the issue.

Fix

Related Identifiers

CVE-2019-8554

Affected Products

Ios

References · 3

• https://osv.dev/vulnerability/CVE-2019-8554 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-8554 · Security Note
• https://support.apple.com/HT209599 · Vendor Advisory