PT-2023-6031 · Apple · Tvos+3
Kirin
·
Publicado
2023-09-26
·
Atualizado
2023-10-12
·
CVE-2023-40520
CVSS v2.0
4.9
Média
| Vetor | AV:L/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
tvOS versions prior to 17
iOS versions prior to 17
iPadOS versions prior to 17
watchOS versions prior to 10
Description
The issue is related to insufficient access control in the Photos Storage of tvOS, iOS, iPadOS, and watchOS operating systems. Exploitation of this issue may allow an attacker to access photos saved in a temporary directory. An app may be able to access edited photos saved to a temporary directory.
Recommendations
For tvOS versions prior to 17, update to tvOS 17 to resolve the issue.
For iOS versions prior to 17, update to iOS 17 to resolve the issue.
For iPadOS versions prior to 17, update to iPadOS 17 to resolve the issue.
For watchOS versions prior to 10, update to watchOS 10 to resolve the issue.
Correção
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ios
Ipados
Tvos
Watchos