CVE-2020-10003

Katalog CVE

CVSS 7.8 · High EPSS 0,38%

Kerentanan Improper Link Resolution Before File Access ('Link Following') pada apple ipados, apple iphone os +3 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A local attacker may be able to elevate their privileges.

Rincian

Terbit di NVD

8 Desember 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-59: Improper Link Resolution Before File Access ('Link Following')

EPSS (30 hari)

0,38% peluang dieksploitasi; lebih tinggi dari 29,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.apple.com/en-us/HT211928 advisory vendor
• https://support.apple.com/en-us/HT211929 advisory vendor
• https://support.apple.com/en-us/HT211930 advisory vendor
• https://support.apple.com/en-us/HT211931 advisory vendor
• http://seclists.org/fulldisclosure/2020/Dec/32 mailing list · advisory pihak ketiga