CVE-2024-54530

Опубликовано: 27 янв. 2025

Источник: nvd

CVSS3: 9.1

EPSS Низкий

Описание

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, visionOS 2.2, watchOS 11.2. Password autofill may fill in passwords after failing authentication.

Ссылки

https://support.apple.com/en-us/121837
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121839
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121843
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121845
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 18.2 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 18.2 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия до 15.2 (исключая)

cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

Версия до 2.2 (исключая)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Версия до 11.2 (исключая)

EPSS

Процентиль: 46%

0.00567

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-863

Связанные уязвимости

GHSA-hrpq-69mg-72v6

CVSS3: 9.1

github

больше 1 года назад

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, watchOS 11.2, visionOS 2.2, iOS 18.2 and iPadOS 18.2. Password autofill may fill in passwords after failing authentication.

BDU:2025-01370

CVSS3: 3.3

fstec