PT-2021-13632

CVE-2021-1865

Published

2021-09-08

Updated

2021-09-16

Description by

CVSS 3.1

5.0

Medium

MetricsAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.5 iPadOS versions prior to 14.5

Description: An issue was found that could potentially expose a user's password on screen due to inadequate password obscuring in screenshots. This issue has been addressed with improved logic.

Recommendations: For iOS versions prior to 14.5, update to iOS 14.5 or later to resolve the issue. For iPadOS versions prior to 14.5, update to iPadOS 14.5 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-312: Cleartext Storage of Sensitive Information