CVE-2020-3864

Sažetak

A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for Windows, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 13.3.1. A DOM object context may not have had a unique security origin.

Reference

https://support.apple.com/en-us/HT210918
https://support.apple.com/en-us/HT210923
https://support.apple.com/en-us/HT210948
https://support.apple.com/en-us/HT210947
https://support.apple.com/en-us/HT210920
https://support.apple.com/en-us/HT210922

CVSS

Base:	7.2
Impact:	10.0
Exploitability:	3.9

Pristup

Vektor	Složenost	Autentikacija
LOCAL	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:L/AC:L/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

18-05-2021 - 13:20

Objavljeno

27-10-2020 - 21:15