Lucene search

PRIOn knowledge basePRION:CVE-2017-2391

HistoryApr 02, 2017 - 1:59 a.m.

Design/Logic Flaw

2017-04-0201:59:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

4.3 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

63.8%

JSON

An issue was discovered in certain Apple products. Pages before 6.1, Numbers before 4.1, and Keynote before 7.1 on macOS and Pages before 3.1, Numbers before 3.1, and Keynote before 3.1 on iOS are affected. The issue involves the “Export” component. It allows users to bypass iWork PDF password protection by leveraging use of 40-bit RC4.

CPENameOperatorVersion
keynotele7.0.5
keynotele3.0.5
numbersle4.0.5
numbersle3.0.5
pagesle6.0.5
pagesle3.0.5

Name	Operator	Version
keynote	le	7.0.5
keynote	le	3.0.5
numbers	le	4.0.5
numbers	le	3.0.5
pages	le	6.0.5
pages	le	3.0.5

References

www.securityfocus.com/bid/97126

www.securitytracker.com/id/1038134

www.securitytracker.com/id/1038135

www.securitytracker.com/id/1038136

support.apple.com/HT207595

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

4.3 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

63.8%

JSON

Related for PRION:CVE-2017-2391