CVE-2020-1908

CVE-2020-1908

Vendor Facebook

Product WhatsApp Business for iOS

Weakness CWE-285

Published November 3, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 could have permitted use of Siri to interact with the WhatsApp application even after the phone was locked.

Key dates

02Disclosure timeline

November 3, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-1908 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/285.html

Related vulnerabilities

Identifiers

CVE CVE-2020-1908

CWE CWE-285

Affected versions

Vendor Facebook

Product WhatsApp Business for iOS

Affected 2.20.100

Vendor Facebook

Product WhatsApp Business for iOS

Affected ≥ unspecified and < 2.20.100

Vendor Facebook

Product WhatsApp for iOS

Affected 2.20.100

Vendor Facebook

Product WhatsApp for iOS

Affected ≥ unspecified and < 2.20.100

01Description

02Disclosure timeline

03References

04Related CVE