PT-2025-3362 · Apple · Ios

Zhouziyi1 · CVE-2024-56960 · Published 2025-01-27 · Updated 2025-01-27

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tianjin Xiaowu Information technology Co., Ltd BeiKe Holdings iOS version 1.3.50

Description The issue allows attackers to access sensitive user information via supplying a crafted link.

Recommendations For Tianjin Xiaowu Information technology Co., Ltd BeiKe Holdings iOS version 1.3.50, consider avoiding the use of crafted links until a patch is available. As a temporary workaround, restrict access to sensitive user information to minimize the risk of exploitation.

Fix

Open Redirect

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-601

CWE-922

Related Identifiers

CVE-2024-56960

Affected Products

Ios

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-56960 · Security Note
• https://github.com/ZhouZiyi1/Vuls/blob/main/241226-BeiKeHoldings/241226-BeiKeHoldings.pdf · Note
• https://twitter.com/CVEnew/status/1883951107229311455 · Twitter Post
• https://t.me/cvedetector/16514 · Telegram Post