Lucene search

CVE-2020-10003

🗓️ 08 Dec 2020 20:13:15Reported by appleType

cve🔗 web.nvd.nist.gov👁 56 Views🌐 2 Media mentions

An issue in symlink path validation logic fixed in macOS Big Sur 11.0.1, iOS 14.2, iPadOS 14.2, tvOS 14.2, watchOS 7.1

Reporter	Title	Published	Views	Family All 14
Prion	Path traversal	8 Dec 202020:15	–	prion
NVD	CVE-2020-10003	8 Dec 202020:15	–	nvd
Cvelist	CVE-2020-10003	8 Dec 202020:02	–	cvelist
Apple	About the security content of tvOS 14.2 - Apple Support	15 Dec 202005:56	–	apple
Apple	About the security content of watchOS 7.1 - Apple Support	15 Dec 202006:04	–	apple
Apple	About the security content of watchOS 7.1	5 Nov 202000:00	–	apple
Apple	About the security content of tvOS 14.2	5 Nov 202000:00	–	apple
Apple	About the security content of iOS 14.2 and iPadOS 14.2 - Apple Support	15 Dec 202006:00	–	apple
Apple	About the security content of iOS 14.2 and iPadOS 14.2	5 Nov 202000:00	–	apple
Apple	About the security content of macOS Big Sur 11.0.1 - Apple Support	18 Feb 202106:14	–	apple

Nvd

Vulners

Node

apple ipadosRange<14.2

apple iphone_osRange<14.2

apple mac_os_xRange<11.0.1

apple tvosRange<14.2

apple watchosRange<7.1

[
  {
    "product": "watchOS",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "7.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "iOS and iPadOS",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "14.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "tvOS",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "14.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "macOS",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "11.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
seclists	www.seclists.org/fulldisclosure/2020/Dec/32
support	www.support.apple.com/en-us/HT211929
support	www.support.apple.com/en-us/HT211930
support	www.support.apple.com/en-us/HT211931
support	www.support.apple.com/en-us/HT211928

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Dec 2020 20:15Current

6.4Medium risk

Vulners AI Score6.4

CVSS24.6

CVSS37.8

EPSS0.0004

CWE-59