PT-2020-20877 · Apple · Apple Macos

Published 2020-10-22 · Updated 2020-10-26 · CVE-2020-9935

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.6

Description A logic issue was addressed with improved state management, which could allow a user to be unexpectedly logged in to another user’s account.

Recommendations For versions prior to 10.15.6, update to macOS Catalina 10.15.6 to resolve the issue.

Fix

Related Identifiers

CVE-2020-9935

Affected Products

Apple Macos

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-9935 · Security Note
• https://osv.dev/vulnerability/CVE-2020-9935 · Vendor Advisory
• https://support.apple.com/kb/HT211289 · Vendor Advisory