PT-2016-1182 · Apple · Ios

Adi Sharabani + 1 · Publicado 2016-02-01 · Atualizado 2016-12-06 · CVE-2016-1730

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2.1

Description The issue is related to the WebSheet component in the iOS operating system, which lacks protection for certain internal data. This can be exploited by a remote attacker using a specially crafted captive portal to read or write data in cookies.

Recommendations For versions prior to 9.2.1, update to version 9.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to captive portals to minimize the risk of exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-19

CWE-200

Identificadores relacionados

BDU:2016-00443

CVE-2016-1730

Produtos afetados

Ios

Referências · 6

• https://osv.dev/vulnerability/CVE-2016-1730 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2016-00443 · Nota de Segurança
• http://securitytracker.com/id/1034737 · Nota
• http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html · Aviso do Fabricante
• https://support.apple.com/HT205732 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1730 · Nota de Segurança