PT-2016-6101
CVE-2016-4719
·
Published
2016-09-18
·
Updated
2017-08-13
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Apple iOS versions prior to 10
Apple watchOS versions prior to 3
Description
The issue concerns the GeoServices component, which does not properly restrict access to PlaceData information. This allows attackers to discover physical locations via a crafted application.
Recommendations
For Apple iOS versions prior to 10, update to version 10 or later to resolve the issue.
For Apple watchOS versions prior to 3, update to version 3 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾