by Kastro
Paper/Archive/CVE-2024-23255

CVE-2024-23255

Apple iOS and iPadOS — An authentication issue was addressed with improved state management.

EPSS 0.7%CVSS 9.1
critical.is priorityof 100
38
CVSS 9.1 (ADP)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 52.1.521 × 2010.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An authentication issue was addressed with improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. Photos in the Hidden Photos Album may be viewed without authentication.

Affected

ProductAffectedFixed inSource
iOS and iPadOS< 17.417.4CNA
macOS< 14.414.4CNA
macos< 14.414.4CISA-ADP
ios< 17.417.4CISA-ADP
ipados< 17.417.4CISA-ADP

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.apple.com/en-us/120893refsupport.apple.com/en-us/120895refsupport.apple.com/en-us/HT214081refsupport.apple.com/en-us/HT214084refseclists.org/fulldisclosure/2024/Mar/21refsupport.apple.com/kb/HT214084refsupport.apple.com/kb/HT214081