PT-2020-20750 · Apple · Apple Macos+1

Bob Gendler · Published 2020-10-27 · Updated 2020-10-30 · CVE-2020-9774

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.3 Security Update versions prior to 2020-001 Mojave Security Update versions prior to 2020-001 High Sierra

Description An issue existed with Siri Suggestions access to encrypted data, which may have allowed encrypted data to be inappropriately accessed. The issue was fixed by limiting access to encrypted data.

Recommendations For macOS versions prior to 10.15.3, update to macOS Catalina 10.15.3 or later. For Security Update versions prior to 2020-001 Mojave, apply Security Update 2020-001 Mojave or later. For Security Update versions prior to 2020-001 High Sierra, apply Security Update 2020-001 High Sierra or later.

Fix

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-311

Related Identifiers

CVE-2020-9774

Affected Products

Siri

Apple Macos

References · 4

• https://support.apple.com/en-us/HT210919 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9774 · Security Note
• https://osv.dev/vulnerability/CVE-2020-9774 · Vendor Advisory
• https://t.me/cibsecurity/15646 · Telegram Post