PT-2017-17526 · Apple · Ios

Anand Kathapurkar + 2 · Publicado 2017-10-23 · Atualizado 2017-10-27 · CVE-2017-7131

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11

Description An issue was discovered in certain Apple products, involving the Bluetooth component. It allows attackers to obtain sensitive Contact card information via a crafted app.

Recommendations For iOS versions prior to 11, update to a version 11 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-7131

Produtos afetados

Ios

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-7131 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-7131 · Aviso do Fabricante
• http://securityfocus.com/bid/101000 · Nota
• https://support.apple.com/HT208112 · Aviso do Fabricante