PT-2019-10909

CVE-2018-4397

·

Published

2019-04-03

·

Updated

2019-04-05

Description by

CVSS 3.1
4.3
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Apple Support versions prior to 2.4 for iOS.
Description: The issue involved sending analytics data using HTTP instead of HTTPS, which has been addressed by switching to HTTPS for analytics data transmission.
Recommendations: For versions prior to 2.4, update to Apple Support version 2.4 or later for iOS to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-20: Improper Input Validation
Related identifiers
CVE-2018-4397
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com