Lucene search

K
vulnrichmentAppleVULNRICHMENT:CVE-2023-42946
HistoryFeb 21, 2024 - 6:41 a.m.

CVE-2023-42946

2024-02-2106:41:42
apple
github.com
4
cve-2023-42946
sensitive information redaction
tvos
watchos
macos sonoma
ios
ipados
user information leakage

AI Score

5.4

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

This issue was addressed with improved redaction of sensitive information. This issue is fixed in tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to leak sensitive user information.

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "tvOS",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified",
        "lessThan": "17.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "macOS",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified",
        "lessThan": "14.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "watchOS",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified",
        "lessThan": "10.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "iOS and iPadOS",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified",
        "lessThan": "17.1",
        "versionType": "custom"
      }
    ]
  }
]

AI Score

5.4

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-42946