CVE-2021-30966

Published: Aug 24, 2021Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. User traffic might unexpectedly be leaked to a proxy server despite PAC configurations.

Affected (5)

Products: Apple: Ipados, Iphone Os, Macos, Tvos, Watchos

5 products

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 15.2
Apple Iphone Os	Before 15.2
Apple Macos	Before 12.1
Apple Tvos	Before 15.2
Apple Watchos	Before 8.3

References (8)

https://support.apple.com/en-us/HT212975

Source: product-security@apple.com

https://support.apple.com/en-us/HT212976

Source: product-security@apple.com

https://support.apple.com/en-us/HT212978

Source: product-security@apple.com

https://support.apple.com/en-us/HT212980

Source: product-security@apple.com

https://support.apple.com/en-us/HT212975

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/en-us/HT212976

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/en-us/HT212978

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/en-us/HT212980

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.