CVEvulnerability
CVE-2023-23505
3.3 LOW
Official page ↗
- Status
- Modified
- Published
- 2023-02-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-532
Description
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, iOS 15.7.3 and iPadOS 15.7.3, iOS 16.3 and iPadOS 16.3. An app may be able to access information about a user’s contacts.
Affected configurations
• apple ipados (< 15.7.3)
• apple ipados (>= 16.0 < 16.3)
• apple iphone os (< 15.7.3)
• apple iphone os (>= 16.0 < 16.3)
• apple macos (>= 11.0 < 11.7.3)
• apple macos (>= 12.0.0 < 12.6.3)
• apple macos (>= 13.0 < 13.2)
• apple watchos (< 9.3)
Related
Weakness · CWE (1)
- CWE-532 Insertion of Sensitive Information into Log File weakness
References
- https://support.apple.com/en-us/HT213598 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213599 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213603 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213604 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213605 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213606 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213598 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213599 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213603 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213604 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213605 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213606 Release Notes, Vendor Advisory