PT-2020-16833 · Apple · Itunes

Sourav Newatia · Published 2020-12-08 · Updated 2021-07-21 · CVE-2020-27895

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions iTunes versions prior to 12.11 for Windows

Description An information disclosure issue existed in the transition of program state, which could allow a malicious application to access local users' Apple IDs. This issue was addressed with improved state handling.

Recommendations For versions prior to 12.11, update to iTunes 12.11 for Windows to resolve the issue. As a temporary workaround, consider restricting access to sensitive user information until the update is applied.

Fix

Related Identifiers

CVE-2020-27895

Affected Products

Itunes

References · 7

• https://osv.dev/vulnerability/CVE-2020-27895 · Vendor Advisory
• https://support.apple.com/en-us/HT211933 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27895 · Security Note
• https://t.me/cibsecurity/17305 · Telegram Post
• https://t.me/cvenotify/6812 · Telegram Post
• https://t.me/cvenotify/6883 · Telegram Post
• https://t.me/cibsecurity/17447 · Telegram Post