Lucene search

K
nvd[email protected]NVD:CVE-2021-30896
HistoryAug 24, 2021 - 7:15 p.m.

CVE-2021-30896

2021-08-2419:15:17
web.nvd.nist.gov
7
logic issue
improved restrictions
ios 15.0.2
ipados 15.0.2
tvos 15.1
watchos 8.1
macos monterey 12.0.1
malicious application
gameplay data

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

30.7%

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, tvOS 15.1, watchOS 8.1, macOS Monterey 12.0.1. A malicious application may be able to read user’s gameplay data.

Affected configurations

Nvd
Node
appleipad_osRange<15.0.2
OR
appleiphone_osRange<15.0.2
OR
applemacosMatch12.0
OR
appletvosRange<15.1
OR
applewatchosRange<8.1

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

30.7%

Related for NVD:CVE-2021-30896