2 lines
3.0 KiB
JSON
2 lines
3.0 KiB
JSON
{"affected":[{"affectedData":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"source":"product-security@apple.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"1AE9DC77-7A0A-47A4-9B85-6CCCFDE5B313","versionEndExcluding":"11.3","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves alarm and timer handling in the \"Clock\" component. It allows physically proximate attackers to discover the iTunes e-mail address."},{"lang":"es","value":"Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.3 se han visto afectadas. El problema afecta la gestión de las alarmas y el temporizador en el componente \"Clock\". Permite que atacantes próximos físicamente descubran la dirección de email de iTunes."}],"id":"CVE-2018-4123","lastModified":"2026-06-17T01:58:24.480","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"NONE","baseScore":2.1,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":3.9,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"PHYSICAL","availabilityImpact":"NONE","baseScore":2.4,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.0"},"exploitabilityScore":0.9,"impactScore":1.4,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2018-04-03T06:29:05.407","references":[{"source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/103578"},{"source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1040604"},{"source":"product-security@apple.com","tags":["Vendor Advisory"],"url":"https://support.apple.com/HT208693"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/103578"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1040604"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.apple.com/HT208693"}],"sourceIdentifier":"product-security@apple.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"nvd@nist.gov","type":"Primary"}]}
|