CVE-2018-4174

Опубликовано: 03 апр. 2018

Источник: nvd

CVSS3: 5.9

CVSS2: 4.3

EPSS Низкий

Описание

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Mail" component. It allows man-in-the-middle attackers to read S/MIME encrypted messages by leveraging an inconsistency in the user interface.

Ссылки

http://www.securityfocus.com/bid/103581
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040604
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040608
Third Party Advisory
VDB Entry
https://support.apple.com/HT208692
Vendor Advisory
https://support.apple.com/HT208693
Vendor Advisory
http://www.securityfocus.com/bid/103581
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040604
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040608
Third Party Advisory
VDB Entry
https://support.apple.com/HT208692
Vendor Advisory
https://support.apple.com/HT208693
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 11.3 (исключая)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Версия до 10.13.4 (исключая)

EPSS

Процентиль: 74%

0.00803

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-x4mh-6g26-xmv9