PT-2021-8554 · Apple · Security Update 2017-002 Sierra+2

Ryan Manly · Published 2021-12-23 · Updated 2022-01-12 · CVE-2017-13892

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS High Sierra versions prior to 10.13.2 Security Update 2017-002 Sierra versions prior to the update Security Update 2017-005 El Capitan versions prior to the update

Description An issue existed in the handling of Contact sharing, which was addressed with improved handling of user information. Sharing contact information may lead to unexpected data sharing.

Recommendations For macOS High Sierra, update to version 10.13.2 or later. For Security Update 2017-002 Sierra, apply the security update. For Security Update 2017-005 El Capitan, apply the security update.

Fix

Related Identifiers

CVE-2017-13892

Affected Products

Security Update 2017-002 Sierra

Security Update 2017-005 El Capitan

Macos High Sierra

References · 4

• https://support.apple.com/en-us/HT208331 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-13892 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-13892 · Security Note
• https://t.me/cibsecurity/34595 · Telegram Post