Vulnerabilities > CVE-2020-1908 - Files or Directories Accessible to External Parties vulnerability in Whatsapp

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
local
low complexity
whatsapp
CWE-552
NVD
Published: 2020-11-03
Updated: 2020-11-13

Summary

Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 could have permitted use of Siri to interact with the WhatsApp application even after the phone was locked.

Vulnerable Configurations

Part Description Count
Application
Whatsapp
92

Common Weakness Enumeration (CWE)

References