CVE-2020-3841

EPSS 0.5%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

27 Feb 2020Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

The issue was addressed with improved UI handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, Safari 13.0.5. A local user may unknowingly send a password unencrypted over the network.

Affected products

Apple · iOS Apple · Safari

References

https://support.apple.com/HT210918 https://support.apple.com/HT210922