PT-2021-19034 · Apple · Ios+1

Christian Dresen + 7 · Published 2021-08-24 · Updated 2023-01-09 · CVE-2021-30997

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 15.2 iPadOS versions prior to 15.2

Description A S/MIME issue existed in the handling of encrypted email, allowing an attacker to potentially recover plaintext contents of an S/MIME-encrypted email. This issue was addressed by not automatically loading some MIME parts.

Recommendations For iOS versions prior to 15.2, update to iOS 15.2 or later to resolve the issue. For iPadOS versions prior to 15.2, update to iPadOS 15.2 or later to resolve the issue.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2021-30997

Affected Products

Ios

Ipados

References · 4

• https://osv.dev/vulnerability/CVE-2021-30997 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-30997 · Security Note
• https://t.me/cvenotify/30953 · Telegram Post
• https://support.apple.com/en-us/HT212976 · Note