CVE-2021-30815

Опубликовано: 19 окт. 2021

Источник: nvd

CVSS3: 2.4

CVSS2: 2.1

EPSS Низкий

Описание

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. A local attacker may be able to view contacts from the lock screen.

Ссылки

http://seclists.org/fulldisclosure/2021/Oct/61
Mailing List
Third Party Advisory
https://support.apple.com/en-us/HT212814
Release Notes
Vendor Advisory
http://seclists.org/fulldisclosure/2021/Oct/61
Mailing List
Third Party Advisory
https://support.apple.com/en-us/HT212814
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 15.0 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 15.0 (исключая)

EPSS

Процентиль: 14%

0.00046

Низкий

2.4 Low

CVSS3

2.1 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-6rmj-mw42-63ww