CVE-2019-8698
published 2019-12-18CVE-2019-8698: A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed…
low3.3CVSS 3.1
AVLACLPRNUIRSUCNINAL
A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in iOS 12.4, tvOS 12.4. A malicious application may be able to restrict access to websites.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios | — | — |
| apple | ios | >= unspecified < iOS 12.4 | iOS 12.4 |
| apple | iphone_os | < 12.4 | 12.4 |
| apple | tvos | < 12.4 | 12.4 |
| apple | tvos | — | — |
| apple | tvos | >= unspecified < tvOS 12.4 | tvOS 12.4 |
GHSA
GHSA-24c7-89jw-rm65: A validation issue existed in the entitlement verification
ghsa_unreviewed·2022-05-24
CVE-2019-8698 [MEDIUM] GHSA-24c7-89jw-rm65: A validation issue existed in the entitlement verification
A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in iOS 12.4, tvOS 12.4. A malicious application may be able to restrict access to websites.
Apple
CVE-2019-8698: tvOS 12.4
vendor_apple·2019-07-22·CVSS 3.3
CVE-2019-8698 [LOW] CVE-2019-8698: tvOS 12.4
Apple Security Update: About the security content of tvOS 12.4
Product: tvOS
Version: 12.4
CVE: CVE-2019-8698
Component: Profiles
Impact: A malicious application may be able to restrict access to websites
Description: A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement.
Apple
CVE-2019-8698: iOS 12.4
vendor_apple·2019-07-22·CVSS 3.3
CVE-2019-8698 [LOW] CVE-2019-8698: iOS 12.4
Apple Security Update: About the security content of iOS 12.4
Product: iOS
Version: 12.4
CVE: CVE-2019-8698
Component: Profiles
Impact: A malicious application may be able to restrict access to websites
Description: A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-12-18
Published