A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. A sandboxed app may be able to access sensitive user data in system logs.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/120910 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/120911 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/120908 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/120912 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/120909 | Release Notes Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
29 Oct 2024, 15:27
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Apple iphone Os
Apple Apple ipados Apple macos |
|
| References | () https://support.apple.com/en-us/120912 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/120910 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/120909 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/120911 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/120908 - Release Notes, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CWE | CWE-532 | |
| CPE | cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* |
24 Oct 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-24 17:15
Updated : 2024-11-05 22:35
NVD link : CVE-2024-44205
Mitre link : CVE-2024-44205
JSON object : View
Products Affected
apple
- ipados
- iphone_os
- macos
CWE
CWE-532
Insertion of Sensitive Information into Log File