PT-2021-18989 · Apple · Ios+4

Joshua Sardella · Published 2021-08-24 · Updated 2023-01-09 · CVE-2021-30943

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 15.2 iPadOS versions prior to 15.2 watchOS versions prior to 8.3 macOS Monterey versions prior to 12.1

Description An issue in the handling of group membership was resolved with improved logic, which could allow a malicious user to leave a messages group but continue to receive messages in that group.

Recommendations For iOS versions prior to 15.2, update to iOS 15.2 or later. For iPadOS versions prior to 15.2, update to iPadOS 15.2 or later. For watchOS versions prior to 8.3, update to watchOS 8.3 or later. For macOS Monterey versions prior to 12.1, update to macOS Monterey 12.1 or later.

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2021-30943

Affected Products

Apple Macos

Ios

Ipados

Macos Monterey

Watchos

References · 8

• https://osv.dev/vulnerability/CVE-2021-30943 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-30943 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30943 · Note
• https://support.apple.com/en-us/HT212976 · Note
• https://support.apple.com/en-us/HT212975 · Note
• https://t.me/cvenotify/30954 · Telegram Post
• https://support.apple.com/en-us/102874 · Note
• https://support.apple.com/en-us/HT212978 · Note