CVEvulnerability
CVE-2023-40393
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-01-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-306
Description
An authentication issue was addressed with improved state management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. Photos in the Hidden Photos Album may be viewed without authentication.
Affected configurations
• apple macos (< 14.0)
Related
Weakness · CWE (1)
- CWE-306 Missing Authentication for Critical Functionality weakness
References
- https://support.apple.com/en-us/120949 support.apple.com
- https://support.apple.com/en-us/120950 support.apple.com
- https://support.apple.com/en-us/HT213940 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213940 support.apple.com