CVE-2020-9868 : Security Advisory and Response

A certificate validation issue in Apple products allowed attackers to impersonate trusted websites using shared key material.

Understanding CVE-2020-9868

What is CVE-2020-9868?

A certificate validation issue existed in Apple's iOS, macOS, tvOS, and watchOS, allowing attackers to impersonate trusted websites.

The Impact of CVE-2020-9868

This vulnerability could have enabled attackers to impersonate trusted websites using shared key material from administrator-added certificates.

Technical Details of CVE-2020-9868

Vulnerability Description

The issue was related to certificate validation when processing administrator-added certificates.

Affected Systems and Versions

iOS: Less than iOS 13.6 and iPadOS 13.6
macOS: Less than macOS Catalina 10.15.6
tvOS: Less than tvOS 13.4.8
watchOS: Less than watchOS 6.2.8

Exploitation Mechanism

Attackers could exploit this vulnerability to impersonate trusted websites by utilizing shared key material.

Mitigation and Prevention

Immediate Steps to Take

Update affected systems to iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, or watchOS 6.2.8.
Regularly review and validate administrator-added certificates.

Long-Term Security Practices

Implement a robust certificate validation process.
Educate users on recognizing potential phishing attempts.

Patching and Updates

Apply the latest security patches and updates provided by Apple.