high7.5
CVE-2021-30874
An authorization issue was addressed with improved state management.
Impact
An authorization issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. A VPN configuration may be installed by an app without user permission.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Ipados | before 15.0 |
| Apple | Iphone Os | before 15.0 |
| Apple | Macos | before 12.0.1 |