PT-2018-8364 · Apple · Ios

Richard Will · Publicado 2018-04-03 · Atualizado 2018-05-03 · CVE-2017-7075

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11

Description An issue in certain Apple products allows local users to obtain sensitive information. The issue involves the Notes component, where users can read search results containing locked-note content, thus gaining access to sensitive information.

Recommendations For iOS versions prior to 11, update to a version 11 or later to resolve the issue. As a temporary workaround, consider restricting access to the Notes component to minimize the risk of exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-7075

Produtos afetados

Ios

Referências · 3

• https://support.apple.com/HT208112 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-7075 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-7075 · Aviso do Fabricante