PT-2020-20920 · Apple · Macos Catalina

Alexander Heinrich + 2 · Published 2020-10-22 · Updated 2022-05-24 · CVE-2020-9986

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS Catalina versions prior to 10.15.7

Description A file access issue existed with certain home folder files, allowing a malicious application to potentially read sensitive location information. This issue was addressed with improved access restrictions.

Recommendations For macOS Catalina versions prior to 10.15.7, update to macOS Catalina 10.15.7 to resolve the issue.

Fix

Related Identifiers

CVE-2020-9986

Affected Products

Macos Catalina

References · 5

• https://osv.dev/vulnerability/CVE-2020-9986 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9986 · Security Note
• https://support.apple.com/kb/HT211849 · Vendor Advisory
• https://t.me/cvenotify/5578 · Telegram Post
• http://seclists.org/fulldisclosure/2020/Nov/21 · Note