7.5

CVE-2016-1842

MapKit in Apple iOS before 9.3.2, OS X before 10.11.5, and watchOS before 2.2.1 does not use HTTPS for shared links, which allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iPhone OS Version <= 9.3.1
Apple ≫ macOS X Version <= 10.11.4
Apple ≫ watchOS Version <= 2.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.27% 0.808
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

http://lists.apple.com/archives/security-announce/2016/May/msg00004.html
Vendor Advisory
Mailing List
https://support.apple.com/HT206567
Vendor Advisory
http://lists.apple.com/archives/security-announce/2016/May/msg00002.html
Vendor Advisory
Mailing List
http://www.securitytracker.com/id/1035890
Third Party Advisory
VDB Entry
https://support.apple.com/HT206568
Vendor Advisory
http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
Vendor Advisory
Mailing List
https://support.apple.com/HT206566
Vendor Advisory