Lucene search

AppleCVE-2020-3885

HistoryApr 01, 2020 - 6:15 p.m.

CVE-2020-3885

2020-04-0118:15:15

CWE-670

apple

web.nvd.nist.gov

151

cve-2020-3885

logic issue

ios

ipados

tvos

safari

itunes

icloud

windows

security issue

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

5.6

Confidence

Low

EPSS

0.002

Percentile

61.0%

JSON

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A file URL may be incorrectly processed.

Affected configurations

Nvd

Vulners

Node

appleicloudRange<7.18windows

appleicloudRange10.0.0–10.9.3windows

appleitunesRange<12.10.5windows

applesafariRange<13.1

appleipad_osRange<13.4

appleiphone_osRange<13.4

appletvosRange<13.4

VendorProductVersionCPE
appleicloud*cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*
appleitunes*cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*
applesafari*cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
appleipad_os*cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*
appleiphone_os*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
appletvos*cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	icloud	*	cpe:2.3:a:apple:icloud::::::windows::*
apple	itunes	*	cpe:2.3:a:apple:itunes::::::windows::*
apple	safari	*	cpe:2.3:a:apple:safari::::::::
apple	ipad_os	*	cpe:2.3:o:apple:ipad_os::::::::
apple	iphone_os	*	cpe:2.3:o:apple:iphone_os::::::::
apple	tvos	*	cpe:2.3:o:apple:tvos::::::::

CNA Affected

[
  {
    "product": "iOS",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "iOS 13.4 and iPadOS 13.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "tvOS",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "tvOS 13.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Safari",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "Safari 13.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "iTunes for Windows",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "iTunes for Windows 12.10.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "iCloud for Windows",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "iCloud for Windows 10.9.3",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "iCloud for Windows (Legacy)",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "iCloud for Windows 7.18",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]