PT-2016-1182 · Apple · Ios

Adi Sharabani + 1 · Published 2016-02-01 · Updated 2016-12-06 · CVE-2016-1730

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2.1

Description The issue is related to the WebSheet component in the iOS operating system, which lacks protection for certain internal data. This can be exploited by a remote attacker using a specially crafted captive portal to read or write data in cookies.

Recommendations For versions prior to 9.2.1, update to version 9.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to captive portals to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-19

CWE-200

Related Identifiers

BDU:2016-00443

CVE-2016-1730

Affected Products

Ios

References · 6

• https://osv.dev/vulnerability/CVE-2016-1730 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00443 · Security Note
• http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html · Vendor Advisory
• https://support.apple.com/HT205732 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1730 · Security Note
• http://securitytracker.com/id/1034737 · Note