CVE Vulnerabilities

CVE-2021-30915

Published: Aug 24, 2021 | Modified: Nov 21, 2024
CVSS 3.x
2.4
LOW
Source:
NVD
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A person with physical access to an iOS device may be able to determine characteristics of a users password in a secure text entry field.

Affected Software

NameVendorStart VersionEnd Version
IpadosApple*15.1 (excluding)
Iphone_osApple*15.1 (excluding)
Mac_os_xApple*10.15.7 (excluding)
Mac_os_xApple10.15.7 (including)10.15.7 (including)
Mac_os_xApple10.15.7-security_update_2020-001 (including)10.15.7-security_update_2020-001 (including)
Mac_os_xApple10.15.7-security_update_2021-001 (including)10.15.7-security_update_2021-001 (including)
Mac_os_xApple10.15.7-security_update_2021-002 (including)10.15.7-security_update_2021-002 (including)
Mac_os_xApple10.15.7-security_update_2021-003 (including)10.15.7-security_update_2021-003 (including)
Mac_os_xApple10.15.7-security_update_2021-004 (including)10.15.7-security_update_2021-004 (including)
Mac_os_xApple10.15.7-security_update_2021-005 (including)10.15.7-security_update_2021-005 (including)
Mac_os_xApple10.15.7-security_update_2021-006 (including)10.15.7-security_update_2021-006 (including)
Mac_os_xApple10.15.7-supplemental_update (including)10.15.7-supplemental_update (including)
MacosApple11.0 (including)11.6.1 (excluding)
MacosApple12.0 (including)12.0 (including)
TvosApple*15.1 (excluding)
WatchosApple*8.1 (excluding)

References