5.5

CVE-2023-42823

The issue was resolved by sanitizing logging This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1. An app may be able to access user-sensitive data.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iPadOS Version < 16.7.2
Apple ≫ iPadOS Version17.0
Apple ≫ iPhone OS Version < 16.7.2
Apple ≫ iPhone OS Version17.0
Apple ≫ macOS Version >= 12.0 < 12.7.1
Apple ≫ macOS Version >= 13.0 < 13.6.1
Apple ≫ macOS Version14.0
Apple ≫ tvOS Version < 17.1
Apple ≫ watchOS Version < 10.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.43% 0.338
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0 2.7 1.2 1.4
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CWE-922 Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

https://support.apple.com/kb/HT213984
https://support.apple.com/en-us/HT213981
Vendor Advisory
https://support.apple.com/en-us/HT213985
Vendor Advisory
https://support.apple.com/en-us/HT213984
Vendor Advisory
https://support.apple.com/en-us/HT213982
Vendor Advisory
https://support.apple.com/en-us/HT213988
Vendor Advisory
https://support.apple.com/kb/HT213982
https://support.apple.com/kb/HT213988
https://support.apple.com/en-us/HT213983
Vendor Advisory
https://support.apple.com/kb/HT213983
https://support.apple.com/en-us/HT213987
Vendor Advisory
https://support.apple.com/kb/HT213987