CVE-2024-54542

EPSS 0.2%
Published 27.01.2025 22:15:14
Last modified 24.03.2025 14:53:26
Source product-security@apple.com
Teams watchlist Login
Open Login

An authentication issue was addressed with improved state management. This issue is fixed in Safari 18.2, macOS Sequoia 15.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2. Private Browsing tabs may be accessed without authentication.

Affected products Warnungen 0 Metrics 2 CWE 1 References 7

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

This information is available to logged-in users.

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ Safari Version < 18.2

Apple ≫ iPadOS Version < 18.2

Apple ≫ iPhone OS Version < 18.2

Apple ≫ macOS Version < 15.2

Apple ≫ watchOS Version < 11.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.2%	0.42

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://support.apple.com/en-us/121839

Vendor Advisory

Release Notes

https://support.apple.com/en-us/121837

Vendor Advisory

Release Notes

https://support.apple.com/en-us/121843

Vendor Advisory

Release Notes

https://support.apple.com/en-us/121846

Vendor Advisory

Release Notes

https://nvd.nist.gov/vuln/detail/CVE-2024-54542

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-54542

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-54542

EUVD