Security Bulletin: MaaS360 has identified a vulnerability in the MaaS360 iOS Application. (CVE-2019-4735)

Summary

A vulnerability was identified and remediated in the IBM MaaS360 for iOS Application (Version 3.96.62).

Vulnerability Details

CVEID:CVE-2019-4735
**DESCRIPTION:**IBM MaaS360 for iOS could allow an attacker with physical access to the device to obtain sensitive information from the agent outside of the container.
CVSS Base score: 2.4
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/172705 for the current score.
CVSS Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

*Maas360 iOS Mobile Apps

| 3.96.62 and Prior

*Vulnerability only exists when device is on iOS 13 or greater.

Remediation/Fixes

Update the MaaS360 iOS Mobile App to version 3.96.70 or greater.

Workarounds and Mitigations

None.