CVE-2018-4397

2019-04-0317:43:19

apple

www.cve.org

4.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

JSON

Analytics data was sent using HTTP rather than HTTPS. This was addressed by sending analytics data using HTTPS. This issue affected versions prior to Apple Support 2.4 for iOS.

CNA Affected

[
  {
    "product": "Apple Support app",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions prior to: Apple Support for iOS 2.4"
      }
    ]
  }
]

References

support.apple.com/kb/HT209117