PT-2018-16503 · Apple · Ios

Hunter Byrnes · Publicado 2018-06-08 · Atualizado 2018-07-17 · CVE-2018-4244

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Média

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4

Description An issue in certain Apple products allows physically proximate attackers to discover private contact information via the Siri Contacts component.

Recommendations For iOS versions prior to 11.4, update to version 11.4 or later to resolve the issue. As a temporary workaround, consider disabling the Siri Contacts component until a patch is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-4244

Produtos afetados

Ios

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-4244 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-4244 · Aviso do Fabricante
• https://support.apple.com/HT208848 · Aviso do Fabricante
• http://securitytracker.com/id/1041031 · Nota