Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-13892

An issue existed in the handling of Contact sharing. This issue was addressed with improved handling of user information. This issue is fixed in macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan. Sharing contact information may lead to unexpected data sharing.

Published

2021-12-23T20:15:08.177

Last Modified

2024-11-21T03:11:51.970

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System apple mac_os_x < 10.11.6 Yes
Operating System apple mac_os_x < 10.12.6 Yes
Operating System apple mac_os_x 10.11.6 Yes
Operating System apple mac_os_x 10.11.6 Yes
Operating System apple mac_os_x 10.11.6 Yes
Operating System apple mac_os_x 10.11.6 Yes
Operating System apple mac_os_x 10.11.6 Yes
Operating System apple mac_os_x 10.11.6 Yes
Operating System apple mac_os_x 10.11.6 Yes
Operating System apple mac_os_x 10.11.6 Yes
Operating System apple mac_os_x 10.12.6 Yes
Operating System apple mac_os_x 10.12.6 Yes
Operating System apple macos < 10.13.2 Yes
References