5.5
CVE-2024-23207
- EPSS 0.34%
- Veröffentlicht 23.01.2024 01:15:10
- Zuletzt bearbeitet 02.04.2026 19:16:54
- Quelle product-security@apple.com
- CVE-Watchlists
- Unerledigt
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, watchOS 10.3. An app may be able to access sensitive user data.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.34% | 0.257 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
http://seclists.org/fulldisclosure/2024/Jan/37
http://seclists.org/fulldisclosure/2024/Jan/38
https://support.apple.com/kb/HT214058
https://support.apple.com/en-us/HT214058
https://support.apple.com/en-us/HT214057
http://seclists.org/fulldisclosure/2024/Jan/33
http://seclists.org/fulldisclosure/2024/Jan/36
https://support.apple.com/en-us/HT214059
https://support.apple.com/en-us/HT214061
http://seclists.org/fulldisclosure/2024/Jan/39
https://support.apple.com/en-us/HT214060
https://support.apple.com/kb/HT214061
https://support.apple.com/en-us/120304
https://support.apple.com/en-us/120309
https://support.apple.com/en-us/120306
https://support.apple.com/en-us/120305
https://support.apple.com/en-us/120307