Vulnerabilities > CVE-2019-8799 - Insecure Storage of Sensitive Information vulnerability in Apple products

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
local
low complexity
apple
CWE-922
NVD
Published: 2020-10-27
Updated: 2021-07-21

Summary

This issue was resolved by replacing device names with a random identifier. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15, watchOS 6, tvOS 13. An attacker in physical proximity may be able to passively observe device names in AWDL communications.

Vulnerable Configurations

Part Description Count
OS
Apple
467

Common Weakness Enumeration (CWE)

References