Vulnerabilities > CVE-2019-8512 - Incorrect Authorization vulnerability in Apple Iphone OS

047910
CVSS 5.7 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
apple
CWE-863

Summary

This issue was addressed with improved transparency. This issue is fixed in iOS 12.2. A user may authorize an enterprise administrator to remotely wipe their device without appropriate disclosure.

Vulnerable Configurations

Part Description Count
OS
Apple
186

Common Weakness Enumeration (CWE)