medium5.5
CVE-2020-9979
A trust issue was addressed by removing a legacy API.
Impact
A trust issue was addressed by removing a legacy API. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0. An attacker may be able to misuse a trust relationship to download malicious content.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Ipados | before 14.0 |
| Apple | Iphone Os | before 14.0 |
| Apple | Tvos | before 14.0 |
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2020/Nov/19
- http://seclists.org/fulldisclosure/2020/Nov/20
- https://support.apple.com/en-us/HT211843
- https://support.apple.com/en-us/HT211850
- http://seclists.org/fulldisclosure/2020/Nov/19
- http://seclists.org/fulldisclosure/2020/Nov/20
- https://support.apple.com/en-us/HT211843
- https://support.apple.com/en-us/HT211850