CVE-2020-9771 is not fixed correctly (2020)

#1

Post by adib » Sun, Jul 04, 2021, 6:30 PM UTC

CVE-2020-9771 is not fixed correctly (2020)
theevilbit.github.io

Re: CVE-2020-9771 is not fixed correctly (2020)

#2

Post by hashhar » Sun, Jul 04, 2021, 9:08 PM UTC

Wow. A "wontfix" for such a critical bug?

I just checked and there are quite a few apps that I've had to give full disk access to - some of which include applications running remote code or reading data from untrusted usb devices device.

Wonder what could go wrong.

Re: CVE-2020-9771 is not fixed correctly (2020)

#3

Post by TheSwordsman » Sun, Jul 04, 2021, 9:14 PM UTC

Too bad this was posted on a US holiday weekend. :(

Re: CVE-2020-9771 is not fixed correctly (2020)

#4

Post by pengaru » Sun, Jul 04, 2021, 9:22 PM UTC

TheSwordsman wrote: post #3

Too bad this was posted on a US holiday weekend. :(

[2020]

Re: CVE-2020-9771 is not fixed correctly (2020)

#5

Post by [deleted] » Sun, Jul 04, 2021, 10:12 PM UTC

[deleted]

Re: CVE-2020-9771 is not fixed correctly (2020)

#6

Post by [deleted] » Sun, Jul 04, 2021, 10:22 PM UTC

[deleted]

Re: CVE-2020-9771 is not fixed correctly (2020)

#7

Post by f3d46600-b66e » Sun, Jul 04, 2021, 11:33 PM UTC

Full disk access bypassing user permissions ... Is bad, even if "full disk access" to the app was indeed given.

This is not obvious when you allow terminal (or any other app) the disk access.