CVE-2018-4293

Published: Apr 3, 2019Modified: Nov 21, 2024

5.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

A cookie management issue was addressed with improved checks. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

Affected (6)

Products: Apple: Iphone Os, Mac Os X, Tvos, Watchos, Icloud, Itunes

6 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Before 11.4.1
Apple Mac Os X	Before 10.13.6
Apple Tvos	Before 11.4.1
Apple Watchos	Before 4.3.2

Configuration B

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Apple Icloud	Before 7.6
Apple Itunes	Before 12.8

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.