PT-2017-13119 · Apple · Ios

Ayden Panhuyzen + 2 · Publicado 2017-11-13 · Atualizado 2017-11-28 · CVE-2017-13805

Positive Technologies (AI Summary)

CVSS v3.1

2.4

Baixa

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 11.1

Description The issue involves the Siri component and allows physically proximate attackers to obtain sensitive information via a Siri request for private-content notifications that should not have been available in the lock-screen state.

Recommendations For versions prior to 11.1, update to version 11.1 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-13805

Produtos afetados

Ios

Referências · 4

• http://securitytracker.com/id/1039703 · Nota
• https://support.apple.com/HT208222 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-13805 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-13805 · Aviso do Fabricante