148 lines
5.5 KiB
JSON
148 lines
5.5 KiB
JSON
{
|
||
"dataType": "CVE_RECORD",
|
||
"dataVersion": "5.2",
|
||
"cveMetadata": {
|
||
"cveId": "CVE-2024-44290",
|
||
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
|
||
"state": "PUBLISHED",
|
||
"assignerShortName": "apple",
|
||
"dateReserved": "2024-08-20T21:45:40.797Z",
|
||
"datePublished": "2024-12-11T22:57:50.012Z",
|
||
"dateUpdated": "2026-04-02T18:13:38.538Z"
|
||
},
|
||
"containers": {
|
||
"cna": {
|
||
"problemTypes": [
|
||
{
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"description": "An app may be able to determine a user’s current location"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"affected": [
|
||
{
|
||
"vendor": "Apple",
|
||
"product": "iOS and iPadOS",
|
||
"versions": [
|
||
{
|
||
"version": "0",
|
||
"status": "affected",
|
||
"lessThan": "18.1",
|
||
"versionType": "custom"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Apple",
|
||
"product": "macOS",
|
||
"versions": [
|
||
{
|
||
"version": "0",
|
||
"status": "affected",
|
||
"lessThan": "15.1",
|
||
"versionType": "custom"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Apple",
|
||
"product": "watchOS",
|
||
"versions": [
|
||
{
|
||
"version": "0",
|
||
"status": "affected",
|
||
"lessThan": "11.1",
|
||
"versionType": "custom"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"value": "This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, watchOS 11.1. An app may be able to determine a user’s current location."
|
||
}
|
||
],
|
||
"references": [
|
||
{
|
||
"url": "https://support.apple.com/en-us/121563"
|
||
},
|
||
{
|
||
"url": "https://support.apple.com/en-us/121564"
|
||
},
|
||
{
|
||
"url": "https://support.apple.com/en-us/121565"
|
||
}
|
||
],
|
||
"providerMetadata": {
|
||
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
|
||
"shortName": "apple",
|
||
"dateUpdated": "2026-04-02T18:13:38.538Z"
|
||
}
|
||
},
|
||
"adp": [
|
||
{
|
||
"problemTypes": [
|
||
{
|
||
"descriptions": [
|
||
{
|
||
"type": "CWE",
|
||
"lang": "en",
|
||
"description": "CWE-noinfo Not enough information"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"metrics": [
|
||
{
|
||
"cvssV3_1": {
|
||
"scope": "UNCHANGED",
|
||
"version": "3.1",
|
||
"baseScore": 3.3,
|
||
"attackVector": "LOCAL",
|
||
"baseSeverity": "LOW",
|
||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
|
||
"integrityImpact": "NONE",
|
||
"userInteraction": "REQUIRED",
|
||
"attackComplexity": "LOW",
|
||
"availabilityImpact": "NONE",
|
||
"privilegesRequired": "NONE",
|
||
"confidentialityImpact": "LOW"
|
||
}
|
||
},
|
||
{
|
||
"other": {
|
||
"type": "ssvc",
|
||
"content": {
|
||
"timestamp": "2024-12-16T21:36:48.488042Z",
|
||
"id": "CVE-2024-44290",
|
||
"options": [
|
||
{
|
||
"Exploitation": "none"
|
||
},
|
||
{
|
||
"Automatable": "no"
|
||
},
|
||
{
|
||
"Technical Impact": "partial"
|
||
}
|
||
],
|
||
"role": "CISA Coordinator",
|
||
"version": "2.0.3"
|
||
}
|
||
}
|
||
}
|
||
],
|
||
"title": "CISA ADP Vulnrichment",
|
||
"providerMetadata": {
|
||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||
"shortName": "CISA-ADP",
|
||
"dateUpdated": "2024-12-16T21:38:02.560Z"
|
||
}
|
||
}
|
||
]
|
||
}
|
||
} |