Vulnerability Name: | CVE-2017-2397 (CCN-124055) | ||||||||||||
Assigned: | 2016-12-01 | ||||||||||||
Published: | 2017-03-27 | ||||||||||||
Updated: | 2017-07-12 | ||||||||||||
Summary: | An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Accounts" component. It allows physically proximate attackers to discover an Apple ID by reading an iCloud authentication prompt on the lock screen. | ||||||||||||
CVSS v3 Severity: | 2.4 Low (CVSS v3.1 Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) 2.1 Low (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C)
2.9 Low (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C)
| ||||||||||||
CVSS v2 Severity: | 2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N)
| ||||||||||||
Vulnerability Type: | CWE-200 | ||||||||||||
Vulnerability Consequences: | Obtain Information | ||||||||||||
References: | Source: MITRE Type: CNA CVE-2017-2397 Source: BID Type: Third Party Advisory, VDB Entry 97138 Source: CCN Type: BID-97138 Apple iOS APPLE-SA-2017-03-27-4 Multiple Security Vulnerabilities Source: SECTRACK Type: UNKNOWN 1038139 Source: XF Type: UNKNOWN appleios-cve20172397-info-disc(124055) Source: CCN Type: Apple security document HT207617 About the security content of iOS 10.3 Source: CONFIRM Type: Vendor Advisory https://support.apple.com/HT207617 | ||||||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: Denotes that component is vulnerable | ||||||||||||
BACK |