PT-2017-17538
CVE-2017-7143
·
تاريخ النشر
2017-10-23
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
macOS versions prior to 10.13
Description
The issue involves the
Captive Network Assistant component, which has a UI error. This error can lead to cleartext transmission of passwords without the user's awareness when using the captive portal browser. Remote attackers can discover cleartext passwords by sniffing the network during use of the captive portal browser in opportunistic circumstances.Recommendations
For macOS versions prior to 10.13, update to version 10.13 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾