HACKINTOSH.ORG | Macintosh discussion forums

Macintosh News => iPhone/iPod/iPad News => Topic started by: HCK on March 28, 2020, 04:05:21 pm



Title: iOS VPN bug can lead to user data and IP addresses being leaked
Post by: HCK on March 28, 2020, 04:05:21 pm
iOS VPN bug can lead to user data and IP addresses being leaked

Apple is working on a fix.

What you need to know


There appears to be a bug affecting VPN security on iOS.
It was discoverd by ProtonVPN in iOS 13.3.1 or later.
The issue could lead to a user's data or IP address being leaked.


A report from Bleeping Computer claims that there's an unpatched vulnerability in iOS VPN security that could lead to user data or IP addresses being leaked.

According to the report:


  A currently unpatched security vulnerability affecting iOS 13.3.1 or later prevents virtual private networks (VPNs) from encrypting all traffic and can lead to some Internet connections bypassing VPN encryption to expose users' data or leak their IP addresses.
 
  While connections made after connecting to a VPN on your iOS device are not affected by this bug, all previously established connections will remain outside the VPN's secure tunnel as ProtonVPN disclosed.
 
  This VPN bypass vulnerability (rated with a 5.3 CVSS v3.1 base score) was discovered by a security cons...

Source: iOS VPN bug can lead to user data and IP addresses being leaked (http://feedproxy.google.com/~r/TheIphoneBlog/~3/SUpputR449U/ios-vpn-bug-can-lead-user-data-and-ip-addresses-being-leaked)