Improper Authorization in WhatsApp and WhatsApp Business for iOS
CVE-2020-1908
4.6MEDIUM
What is CVE-2020-1908?
The vulnerability in WhatsApp and WhatsApp Business for iOS allows unauthorized access to the app's functionalities even when the device is locked. This flaw enabled Siri to interact with the WhatsApp application, raising security concerns about user privacy and potential data exposure, especially in scenarios where sensitive information could be accessed without proper authentication.
Affected Version(s)
WhatsApp Business for iOS 2.20.100
WhatsApp Business for iOS < 2.20.100
WhatsApp for iOS 2.20.100