CVE-2024-44205

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. A sandboxed app may be able to access sensitive user data in system logs.
References
Link Resource
https://support.apple.com/en-us/120908 Release Notes Vendor Advisory
https://support.apple.com/en-us/120909 Release Notes Vendor Advisory
https://support.apple.com/en-us/120910 Release Notes Vendor Advisory
https://support.apple.com/en-us/120911 Release Notes Vendor Advisory
https://support.apple.com/en-us/120912 Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

29 Oct 2024, 15:27

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
CWE CWE-532
First Time Apple ipados
Apple iphone Os
Apple macos
Apple
CPE cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
References () https://support.apple.com/en-us/120908 - () https://support.apple.com/en-us/120908 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/120909 - () https://support.apple.com/en-us/120909 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/120910 - () https://support.apple.com/en-us/120910 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/120911 - () https://support.apple.com/en-us/120911 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/120912 - () https://support.apple.com/en-us/120912 - Release Notes, Vendor Advisory

25 Oct 2024, 12:56

Type Values Removed Values Added
Summary
  • (es) Se solucionó un problema de privacidad con una mejor redacción de datos privados para las entradas de registro. Este problema se solucionó en macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 16.7.9 y iPadOS 16.7.9, iOS 17.6 y iPadOS 17.6, macOS Sonoma 14.6. Una aplicación aislada puede tener acceso a datos confidenciales del usuario en los registros del sistema.

24 Oct 2024, 17:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-10-24 17:15

Updated : 2024-11-05 22:35


NVD link : CVE-2024-44205

Mitre link : CVE-2024-44205

CVE.ORG link : CVE-2024-44205


JSON object : View

Products Affected

apple

  • macos
  • ipados
  • iphone_os
CWE
CWE-532

Insertion of Sensitive Information into Log File