CVE-2020-3890 — Resource Exposure in Apple IOS

CWE-668 — Resource Exposure3 documents3 sources
Severity
5.3MEDIUMNVD
EPSS
0.2%
top 53.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Apple IOSApple Ipad OSApple Iphone OS
Timeline
PublishedApr 1
Latest updateMay 24

Description

The issue was addressed with improved deletion. This issue is fixed in iOS 13.4 and iPadOS 13.4. Deleted messages groups may still be suggested as an autocompletion.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages3 packages

▶NVDapple/ipad_os< 13.4
▶CVEListV5apple/iosunspecified — iOS 13.4 and iPadOS 13.4
▶NVDapple/iphone_os< 13.4

🔴Vulnerability Details

2
GHSA
GHSA-87qj-mcq2-mp5m: The issue was addressed with improved deletion↗2022-05-24
▶
CVEList
CVE-2020-3890: The issue was addressed with improved deletion↗2020-04-01
▶
CVE-2020-3890 — Resource Exposure in Apple IOS | cvebase