Lucene search

PRIOn knowledge basePRION:CVE-2018-4374

HistoryApr 03, 2019 - 6:29 p.m.

Input validation

2019-04-0318:29:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

50.9%

JSON

A logic issue was addressed with improved validation. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

CPENameOperatorVersion
icloudlt7.8
iphone_oslt12.1
ituneslt12.9.1
safarilt12.0.1
watchoslt5.1

Name	Operator	Version
icloud	lt	7.8
iphone_os	lt	12.1
itunes	lt	12.9.1
safari	lt	12.0.1
watchos	lt	5.1

References

support.apple.com/kb/HT209192

support.apple.com/kb/HT209195

support.apple.com/kb/HT209196

support.apple.com/kb/HT209197

support.apple.com/kb/HT209198

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

50.9%

JSON

Related for PRION:CVE-2018-4374