Vulnerabilities > CVE-2020-1908 - Files or Directories Accessible to External Parties vulnerability in Whatsapp and Whatsapp Business

047910
CVSS 4.6 - MEDIUM
Attack vector
PHYSICAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
low complexity
whatsapp
CWE-552

Summary

Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 could have permitted use of Siri to interact with the WhatsApp application even after the phone was locked.

Vulnerable Configurations

Part Description Count
Application
Whatsapp
101