CVE-2019-8779

Published: Dec 18, 2019Modified: Nov 21, 2024

10.0

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 6.0

Source: NVD

Description

A logic issue applied the incorrect restrictions. This issue was addressed by updating the logic to apply the correct restrictions. This issue is fixed in iOS 13.1.1 and iPadOS 13.1.1. Third party app extensions may not receive the correct sandbox restrictions.

Affected (2)

Products: Apple: Ipados, Iphone Os

2 products

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 13.1.1
Apple Iphone Os	Before 13.1.1

Related CWEs

Exposure of Resource to Wrong Sphere

The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

References (2)

https://support.apple.com/HT210624

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/HT210624

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.