Lucene search

PRIOn knowledge basePRION:CVE-2017-7153

HistoryApr 03, 2018 - 6:29 a.m.

Information disclosure

2018-04-0306:29:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.1%

JSON

An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the “WebKit” component. It allows remote attackers to spoof user-interface information (about whether the entire content is derived from a valid TLS session) via a crafted web site that sends a 401 Unauthorized redirect.

CPENameOperatorVersion
icloudlt7.2
iphone_oslt11.2
ituneslt12.7.2
safarilt11.0.2
tvoslt11.2
watchoslt4.2
ubuntu_linuxeq16.04
ubuntu_linuxeq17.10

Name	Operator	Version
icloud	lt	7.2
iphone_os	lt	11.2
itunes	lt	12.7.2
safari	lt	11.0.2
tvos	lt	11.2
watchos	lt	4.2
ubuntu_linux	eq	16.04
ubuntu_linux	eq	17.10

References

support.apple.com/HT208324

support.apple.com/HT208325

support.apple.com/HT208326

support.apple.com/HT208327

support.apple.com/HT208328

support.apple.com/HT208334

usn.ubuntu.com/3551-1/