CVE-2020-1908: Medium severity whatsapp vulnerability
Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 could have permitted use of Siri to interact with the WhatsApp application even after the phone was locked.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-1908?
CVE-2020-1908 is a vulnerability in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 that allows unauthorized access to the application using Siri even when the phone is locked.
How severe is CVE-2020-1908?
CVE-2020-1908 has a severity rating of 4.6, which is considered medium.
How does CVE-2020-1908 affect WhatsApp and WhatsApp Business?
CVE-2020-1908 affects WhatsApp and WhatsApp Business for iOS prior to v2.20.100 where Siri can be used to interact with the app even if the phone is locked.
How can I fix CVE-2020-1908?
To fix CVE-2020-1908, update WhatsApp and WhatsApp Business to version v2.20.100 or later.
Where can I find more information about CVE-2020-1908?
You can find more information about CVE-2020-1908 in the WhatsApp security advisories at https://www.whatsapp.com/security/advisories/2020/