CVE-2019-8799

Опубликовано: 27 окт. 2020

Источник: nvd

CVSS3: 2.4

CVSS2: 2.1

EPSS Низкий

Описание

This issue was resolved by replacing device names with a random identifier. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15, watchOS 6, tvOS 13. An attacker in physical proximity may be able to passively observe device names in AWDL communications.

Ссылки

https://support.apple.com/en-us/HT210603
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT210604
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT210607
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT210634
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT210603
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT210604
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT210607
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT210634
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 13.1 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 13.1 (исключая)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Версия до 10.15 (исключая)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Версия до 13.0 (исключая)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Версия до 6.0 (исключая)

EPSS

Процентиль: 22%

0.0007

Низкий

2.4 Low

CVSS3

2.1 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-mgpg-rp6c-97r2

github

больше 3 лет назад