CVE-2024-54488

EPSS 0.19%
Published 27.01.2025 22:15:12
Last modified 05.02.2025 16:15:40
Source product-security@apple.com
Teams watchlist Login
Open Login

A logic issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13.7.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sonoma 14.7.2, macOS Sequoia 15.2. Photos in the Hidden Photos Album may be viewed without authentication.

Affected products Warnungen 0 Metrics 3 CWE 1 References 8

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ iPadOS Version < 17.7.3

Apple ≫ iPadOS Version >= 18.0 < 18.2

Apple ≫ iPhone OS Version < 18.2

Apple ≫ macOS Version < 13.7.2

Apple ≫ macOS Version >= 14.0 < 14.7.2

Apple ≫ macOS Version >= 15.0 < 15.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.19%	0.414

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

https://support.apple.com/en-us/121838

Release Notes

https://support.apple.com/en-us/121840

Release Notes

https://support.apple.com/en-us/121842

Release Notes

https://support.apple.com/en-us/121839

Release Notes

https://support.apple.com/en-us/121837

Release Notes

https://nvd.nist.gov/vuln/detail/CVE-2024-54488

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-54488

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-54488

EUVD