CVE-2020-9848 - An authorization issue was addressed with improved state management

Back Back to CVE browser

LOW

An authorization issue was addressed with improved state management

Published Jun 9, 2020

2.4

LOW

CVSS 3.1

EPSS 0.29%

Description

An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5. A person with physical access to an iOS device may be able to view notification contents from the lockscreen.

Affected products

Vendor Apple Product iOS Default
unknown
Affected
- ≥ unspecified, < iOS 13.5 and iPadOS 13.5

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Apple	iOS	unknown	Affected ≥ unspecified, < iOS 13.5 and iPadOS 13.5

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30627
Advisory
https://support.apple.com/HT211168
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30627		Advisory
https://support.apple.com/HT211168		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner apple

Published Jun 9, 2020

Updated Aug 4, 2024

Reserved Mar 2, 2020

Link CVE-2020-9848

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-9848

Red Hat

No data

ENISA EUVD

Assigner apple

Published Jun 9, 2020

Updated Aug 4, 2024

Link EUVD-2020-30627

GitHub

No data