Threat Investigation
Request a demo

CVE-2020-1908

Medium

Description

Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 could have permitted use of Siri to interact with the WhatsApp application even after the phone was locked.

SeverityMedium
CVSS4.6
Exploit probability—
ProductWhatsapp
PublishedNov 3, 2020
First seenNov 3, 2020
Weakness typeCWE-285CWE-285

How to fix

Update
  • whatsapp whatsapp2.20.100 or later
  • whatsapp whatsapp_business2.20.100 or later

Affected products

ProductAffected versionsFixed in
whatsapp whatsappv < 2.20.1002.20.100
whatsapp whatsapp_businessv < 2.20.1002.20.100

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.