CVE-2018-4321 Vulnerability Details

  /     /     /  

CVE-2018-4321 Metadata Quick Info

CVE Published: 03/04/2019 | CVE Updated: 05/08/2024 | CVE Year: 2018
Source: apple | Vendor: n/a | Product: iOS, macOS, tvOS
Status : PUBLISHED

---

CVE-2018-4321 Description

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: A malicious application may be able to access local users AppleIDs
Source: n/a

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).