CVE-2020-9982

5.5MEDIUM

Key Information:

Vendor
Apple
Status
Apple Music For Android
Vendor
CVE Published:
27 October 2020

Summary

This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Apple Music 3.4.0 for Android. A malicious application may be able to leak a user's credentials.

Affected Version(s)

Apple Music for Android < 3.4

References

https://support.apple.com/en-us/HT211898
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.