Lucene search

AppleVULNRICHMENT:CVE-2024-23240

HistoryMar 08, 2024 - 1:35 a.m.

CVE-2024-23240

2024-03-0801:35:22

apple

github.com

cve-2024-23240

ios 17.4

ipados 17.4

shake-to-undo

authentication

AI Score

5.7

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4. Shake-to-undo may allow a deleted photo to be re-surfaced without authentication.

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "iOS and iPadOS",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified",
        "lessThan": "17.4",
        "versionType": "custom"
      }
    ]
  }
]

References

support.apple.com/en-us/HT214081