CVEvulnerability
CVE-2023-42839
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-02-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.2 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-922
Description
This issue was addressed with improved state management. This issue is fixed in tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.
Affected configurations
• apple ipad os (< 17.1)
• apple iphone os (< 17.1)
• apple macos 14.0
• apple tvos (< 17.1)
• apple watchos (< 10.1)
Related
Weakness · CWE (1)
- CWE-922 Insecure Storage of Sensitive Information weakness
References
- https://support.apple.com/en-us/HT213982 Vendor Advisory
- https://support.apple.com/en-us/HT213984 Vendor Advisory
- https://support.apple.com/en-us/HT213987 Vendor Advisory
- https://support.apple.com/en-us/HT213988 Vendor Advisory
- https://support.apple.com/en-us/HT213982 Vendor Advisory
- https://support.apple.com/en-us/HT213984 Vendor Advisory
- https://support.apple.com/en-us/HT213987 Vendor Advisory
- https://support.apple.com/en-us/HT213988 Vendor Advisory
- https://support.apple.com/kb/HT213982 support.apple.com
- https://support.apple.com/kb/HT213984 support.apple.com
- https://support.apple.com/kb/HT213988 support.apple.com