PT-2020-20884 · Apple · Safari+2

Bijoora + 7 · Published 2020-11-12 · Updated 2022-06-02 · CVE-2020-9942

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Safari versions prior to 13.1.2 macOS Big Sur versions prior to 11.0.1

Description An inconsistent user interface issue was addressed with improved state management. Visiting a malicious website may lead to address bar spoofing.

Recommendations For Safari versions prior to 13.1.2, update to Safari 13.1.2 or later to resolve the issue. For macOS Big Sur versions prior to 11.0.1, update to macOS Big Sur 11.0.1 or later to resolve the issue.

Fix

Clickjacking

Weakness Enumeration

CWE-1021

Related Identifiers

CVE-2020-9942

Affected Products

Apple Macos

Safari

Macos Big Sur

References · 7

• https://osv.dev/vulnerability/CVE-2020-9942 · Vendor Advisory
• https://support.apple.com/en-us/HT211292 · Vendor Advisory
• https://support.apple.com/en-us/HT211931 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9942 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9942 · Note
• http://seclists.org/fulldisclosure/2020/Dec/32 · Note
• https://support.apple.com/en-us/102846 · Note