PT-2017-17535 · Apple · Ios

Agim Allkanjari · Publicado 2017-10-23 · Atualizado 2017-10-26 · CVE-2017-7140

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11

Description An issue in certain Apple products involves the Keyboard Suggestions component, allowing attackers to obtain sensitive information by reading keyboard autocorrect suggestions.

Recommendations For iOS versions prior to 11, update to a version 11 or later to resolve the issue. As a temporary workaround, consider disabling the Keyboard Suggestions feature until a patch is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-7140

Produtos afetados

Ios

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-7140 · Nota de Segurança
• http://securityfocus.com/bid/101000 · Nota
• https://support.apple.com/HT208112 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-7140 · Aviso do Fabricante