An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data.
CVE-2019-6223Apple iOS and macOS Group Facetime Vulnerability
Bekannt ausgenutzt — Apple iOS and macOS Group Facetime Vulnerability
CISA hat am 03.11.2021 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 03.05.2022.
Erforderliche Maßnahme: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2019-6223
Beschreibung
A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- https://support.apple.com/HT209521 Release NotesVendor Advisory
- https://support.apple.com/HT209520 Release NotesVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-6223 US Government Resource
CPE-Treffer (NVD) (2)
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*< 12.1.4cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*< 10.14.3