CVEvulnerability
CVE-2018-4321
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-04-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-20
Description
A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12.
Affected configurations
• apple iphone os (< 12.0)
• apple mac os x (< 10.14)
• apple tvos (< 12)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://support.apple.com/kb/HT209106 Vendor Advisory
- https://support.apple.com/kb/HT209107 Vendor Advisory
- https://support.apple.com/kb/HT209139 Vendor Advisory
- https://support.apple.com/kb/HT209106 Vendor Advisory
- https://support.apple.com/kb/HT209107 Vendor Advisory
- https://support.apple.com/kb/HT209139 Vendor Advisory