PT-2025-3031 · Apple · Ios+5
Benjamin Hornbeck
+3
·
Published
2024-12-11
·
Updated
2025-01-30
·
CVE-2024-54488
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
macOS Ventura versions prior to 13.7.2
iOS versions prior to 18.2
iPadOS versions prior to 18.2
iPadOS versions prior to 17.7.3
macOS Sonoma versions prior to 14.7.2
macOS Sequoia versions prior to 15.2
Description
A logic issue was addressed with improved file handling. Photos in the Hidden Photos Album may be viewed without authentication. The issue is related to insufficient authentication procedures, which could allow a remote attacker to gain unauthorized access to protected information.
Recommendations
For macOS Ventura versions prior to 13.7.2, update to macOS Ventura 13.7.2 to resolve the issue.
For iOS versions prior to 18.2, update to iOS 18.2 to resolve the issue.
For iPadOS versions prior to 18.2, update to iPadOS 18.2 to resolve the issue.
For iPadOS versions prior to 17.7.3, update to iPadOS 17.7.3 to resolve the issue.
For macOS Sonoma versions prior to 14.7.2, update to macOS Sonoma 14.7.2 to resolve the issue.
For macOS Sequoia versions prior to 15.2, update to macOS Sequoia 15.2 to resolve the issue.
Fix
Improper Authentication
Incorrect Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Apple Macos
Ios
Ipados
Macos Sequoia
Macos Sonoma
Macos Ventura