CVE-2019-8803

published 2019-12-18

CVE-2019-8803: An authentication issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2…

high 8.4 CVSS 3.1

AV L AC L PR N UI N S U C H I H A H

An authentication issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. A local attacker may be able to login to the account of a previously logged in user without valid credentials..

Affected

13 ranges

Vendor	Product	Version range	Fixed in
apple	ios	>= unspecified < iOS 13.2 and iPadOS 13.2	iOS 13.2 and iPadOS 13.2
apple	ios_13.2_and_ipados	—	—
apple	ipados	< 13.2	13.2
apple	iphone_os	< 13.2	13.2
apple	mac_os_x	< 10.15.1	10.15.1
apple	macos	>= unspecified < macOS Catalina 10.15.1	macOS Catalina 10.15.1
apple	macos_catalina_10.15.1_security_update_2019-001_and_security_update_2019-006	—	—
apple	tvos	< 13.2	13.2
apple	tvos	—	—
apple	tvos	>= unspecified < tvOS 13.2	tvOS 13.2
apple	watchos	< 6.1	6.1
apple	watchos	—	—
apple	watchos	>= unspecified < watchOS 6.1	watchOS 6.1

CWE-613