PT-2017-17543 · Apple · Ios

Igor Makarov + 2 · Publicado 2017-10-23 · Atualizado 2017-10-26 · CVE-2017-7148

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11

Description An issue in certain Apple products involves the Location Framework component, allowing attackers to obtain sensitive location information via a crafted app that reads the location variable.

Recommendations For iOS versions prior to 11, update to a version 11 or later to resolve the issue. As a temporary workaround, consider restricting access to location services for untrusted apps until a patch is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-7148

Produtos afetados

Ios

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-7148 · Nota de Segurança
• http://securityfocus.com/bid/101000 · Nota
• https://osv.dev/vulnerability/CVE-2017-7148 · Aviso do Fabricante
• https://support.apple.com/HT208112 · Aviso do Fabricante