CVE-2020-10002 — Apple IOS AND Ipados vulnerability

4 documents4 sources

Severity

5.5MEDIUMNVD

EPSS

0.1%

top 70.98%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Apple IOS AND Ipados Apple Macos Apple Tvos +6 more

Timeline

PublishedDec 8

Latest updateMay 24

Description

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. A local user may be able to read arbitrary files.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages11 packages

▶CVEListV5apple/tvosunspecified — 14.2

▶NVDapple/tvos< 14.2

▶CVEListV5apple/macosunspecified — 11.0+2

▶NVDapple/icloud< 11.5

▶NVDapple/ipados< 14.2

🔴Vulnerability Details

GHSA

GHSA-mq8h-44p4-cp95: A logic issue was addressed with improved state management↗2022-05-24

▶

CVEList

CVE-2020-10002: A logic issue was addressed with improved state management↗2020-12-08

▶

📋Vendor Advisories

Apple

CVE-2020-10002: iOS 14.2 and iPadOS 14.2↗2020-11-05

▶