CVE-2019-8901

MEDIUM · CVSS 6.5 EPSS 0.50%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-10-27 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2019-8901

Severity

MEDIUM

CVSS

6.5

EPSS

0.50%

Original Filing — NVD Description

This issue was addressed by verifying host keys when connecting to a previously-known SSH server. This issue is fixed in iOS 13.1 and iPadOS 13.1. An attacker in a privileged network position may be able to intercept SSH traffic from the “Run script over SSH” action.