CVE-2021-30915

LOW

iPadOS < 15.1 - Password Character Exposure via Secure Text Entry Field

Title source: llm
STIX 2.1

Description

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A person with physical access to an iOS device may be able to determine characteristics of a user's password in a secure text entry field.

References (6)

Core 6
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212869
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212871
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212872
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212867
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212874
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212876

Scores

CVSS v3 2.4
EPSS 0.0033
EPSS Percentile 24.9%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

Status published
Products (8)
apple/ipados < 15.1
apple/iphone_os < 15.1
apple/mac_os_x 10.15.7 (9 CPE variants)
apple/mac_os_x < 10.15.7
apple/macos 12.0
apple/macos 11.0 - 11.6.1
apple/tvos < 15.1
apple/watchos < 8.1
Published Aug 24, 2021
Tracked Since Feb 18, 2026