CVEvulnerability
CVE-2017-7133
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-10-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-319
Description
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "MobileBackup" component. It allows remote attackers to obtain sensitive cleartext information in opportunistic circumstances by leveraging read access to a backup archive that was supposed to have been encrypted.
Affected configurations
• apple iphone os (<= 10.3.3)
Related
Weakness · CWE (1)
- CWE-319 Cleartext Transmission of Sensitive Information weakness
References
- http://www.securityfocus.com/bid/100892 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039385 Third Party Advisory, VDB Entry
- https://support.apple.com/HT208112 Vendor Advisory
- http://www.securityfocus.com/bid/100892 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039385 Third Party Advisory, VDB Entry
- https://support.apple.com/HT208112 Vendor Advisory