3.3
CVE-2024-40832
- EPSS 0.24%
- Veröffentlicht 29.07.2024 23:15:14
- Zuletzt bearbeitet 02.04.2026 19:17:53
- Erkennungen
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. An app may be able to view a contact's phone number in system logs.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.24% | 0.15 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 3.3 | 1.8 | 1.4 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
|
| CISA-ADP | 3.3 | 1.8 | 1.4 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
|
CWE-922 Insecure Storage of Sensitive Information
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
http://seclists.org/fulldisclosure/2024/Jul/18
https://support.apple.com/kb/HT214119
https://support.apple.com/en-us/HT214119
https://support.apple.com/en-us/120911