← Volver a CVEs

CVE-2017-7153

N/A

Descripcion

An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof user-interface information (about whether the entire content is derived from a valid TLS session) via a crafted web site that sends a 401 Unauthorized redirect.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado4/3/2018

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

apple:icloudapple:iphone_osapple:itunesapple:safariapple:tvosapple:watchoscanonical:ubuntu_linuxmicrosoft:windows

Debilidades (CWE)

CWE-601

Referencias

https://support.apple.com/HT208324(product-security@apple.com)

https://support.apple.com/HT208325(product-security@apple.com)

https://support.apple.com/HT208326(product-security@apple.com)

https://support.apple.com/HT208327(product-security@apple.com)

https://support.apple.com/HT208328(product-security@apple.com)

https://support.apple.com/HT208334(product-security@apple.com)

https://usn.ubuntu.com/3551-1/(product-security@apple.com)

https://support.apple.com/HT208324(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/HT208325(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/HT208326(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/HT208327(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/HT208328(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/HT208334(af854a3a-2127-422b-91ae-364da2661108)

https://usn.ubuntu.com/3551-1/(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.