PT-2019-19089
CVE-2019-8554
·
Published
2019-12-18
·
Updated
2020-08-24
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
iOS versions prior to 12.2
Description
A permissions issue existed in the handling of motion and orientation data, allowing a website to access sensor information without user consent. This issue was addressed with improved restrictions.
Recommendations
For iOS versions prior to 12.2, update to iOS 12.2 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾