Vulnerability Name: | CVE-2017-7133 (CCN-132225) | ||||||||||||
Assigned: | 2017-09-19 | ||||||||||||
Published: | 2017-09-19 | ||||||||||||
Updated: | 2019-10-03 | ||||||||||||
Summary: | An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "MobileBackup" component. It allows remote attackers to obtain sensitive cleartext information in opportunistic circumstances by leveraging read access to a backup archive that was supposed to have been encrypted. | ||||||||||||
CVSS v3 Severity: | 7.5 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) 6.5 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)
5.7 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C)
| ||||||||||||
CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
| ||||||||||||
Vulnerability Type: | CWE-319 | ||||||||||||
Vulnerability Consequences: | Gain Access | ||||||||||||
References: | Source: MITRE Type: CNA CVE-2017-7133 Source: BID Type: Third Party Advisory, VDB Entry 100892 Source: CCN Type: BID-100892 Apple iOS APPLE-SA-2017-09-19-1 Multiple Security Vulnerabilities Source: SECTRACK Type: Third Party Advisory, VDB Entry 1039385 Source: XF Type: UNKNOWN apple-ios-cve20177133-weak-sec(132225) Source: CCN Type: Apple security document HT208112 About the security content of iOS 11 Source: CONFIRM Type: Vendor Advisory https://support.apple.com/HT208112 | ||||||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: ![]() | ||||||||||||
BACK |