PT-2021-8559 · Apple · Apple Macos

Andreas Nilsson · Published 2021-12-23 · Updated 2022-01-05 · CVE-2017-13909

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13

Description A local attacker may gain access to iCloud authentication tokens due to an issue in the storage of sensitive tokens. The issue was addressed by placing the tokens in Keychain.

Recommendations For versions prior to 10.13, update to macOS High Sierra 10.13 to fix the issue.

Fix

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

Related Identifiers

CVE-2017-13909

Affected Products

Apple Macos

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-13909 · Security Note
• https://support.apple.com/en-us/HT208144 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-13909 · Vendor Advisory