CVE-2023-42878

Published: Feb 21, 2024Modified: Nov 4, 2025

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.

Affected (4)

Products: Apple: Ipad Os, Iphone Os, Macos, Watchos

4 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Apple Ipad Os	Before 17.1
Apple Iphone Os	Before 17.1
Apple Macos	Version 14.0
Apple Watchos	Before 10.1

Related CWEs

CWE-922

Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

References (9)

https://support.apple.com/en-us/HT213982

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213984

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213988

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213982