PT-2020-15162

CVE-2020-1908

·

Published

2020-11-03

·

Updated

2020-11-13

Description by

CVSS 3.1
4.6
Medium
MetricsAV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions WhatsApp versions prior to 2.20.100 WhatsApp Business versions prior to 2.20.100
Description The issue concerns improper authorization of the Screen Lock feature, which could allow Siri to interact with the WhatsApp application even after the phone is locked. This could potentially permit unauthorized access to the application's functionality.
Recommendations For WhatsApp versions prior to 2.20.100, update to version 2.20.100 or later. For WhatsApp Business versions prior to 2.20.100, update to version 2.20.100 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-285: Improper Authorization
CWE-552: Files or Directories Accessible to External Parties
Related identifiers
CVE-2020-1908
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com