CVE-2023-32390

Опубликовано: 23 июн. 2023

Источник: nvd

CVSS3: 2.4

EPSS Низкий

Описание

The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. Photos belonging to the Hidden Photos Album could be viewed without authentication through Visual Lookup.

Ссылки

https://support.apple.com/en-us/HT213757
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT213758
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT213764
Release Notes
Vendor Advisory
https://support.apple.com/kb/HT213761
https://support.apple.com/en-us/HT213757
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT213758
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT213764
Release Notes
Vendor Advisory
https://support.apple.com/kb/HT213761

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 16.5 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 16.5 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 13.0 (включая) до 13.4 (исключая)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Версия до 9.5 (исключая)

EPSS

Процентиль: 21%

0.00068

Низкий

2.4 Low

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-125

Связанные уязвимости

GHSA-354m-q546-g336

CVSS3: 2.1

github

больше 2 лет назад

The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5. Photos belonging to the Hidden Photos Album could be viewed without authentication through Visual Lookup

BDU:2023-05243