CVE-2019-8704

MEDIUM

iPhone OS < 13.0 and tvOS < 13 - Unauthenticated Sensitive Information Leak via State Management Issue

Title source: llm

Description

An authentication issue was addressed with improved state management. This issue is fixed in tvOS 13. A local user may be able to leak sensitive user information.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/HT210606

Vendor Advisory x_refsource_misc

https://support.apple.com/HT210604

Scores

CVSS v3 5.5

EPSS 0.0031

EPSS Percentile 22.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-287

Status published

Products (2)

apple/iphone_os < 13.0

apple/tvos < 13

Published Dec 18, 2019

Tracked Since Feb 18, 2026