CVE-2020-27895

LOW

iTunes < 12.11 - Local Apple ID Information Disclosure via State Transition

Title source: llm

Description

An information disclosure issue existed in the transition of program state. This issue was addressed with improved state handling. This issue is fixed in iTunes 12.11 for Windows. A malicious application may be able to access local users Apple IDs.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT211933

Scores

CVSS v3 3.3

EPSS 0.0065

EPSS Percentile 47.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Details

Status published

Products (1)

apple/itunes < 12.11

Published Dec 08, 2020

Tracked Since Feb 18, 2026