CVE-2020-3841

MEDIUM

iOS <13.3.1-iPadOS <13.3.1 - Info Disclosure

Title source: llm

Description

The issue was addressed with improved UI handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, Safari 13.0.5. A local user may unknowingly send a password unencrypted over the network.

References (2)

Scores

CVSS v3 6.5
EPSS 0.0014
EPSS Percentile 33.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Classification

CWE
CWE-319 CWE-522
Status published

Affected Products (3)

apple/safari < 13.0.5
apple/ipados < 13.3.1
apple/iphone_os < 13.3.1

Timeline

Published Feb 27, 2020
Tracked Since Feb 18, 2026