CVE Vulnerabilities

CVE-2017-13892

Published: Dec 23, 2021 | Modified: Jan 12, 2022
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

An issue existed in the handling of Contact sharing. This issue was addressed with improved handling of user information. This issue is fixed in macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan. Sharing contact information may lead to unexpected data sharing.

Affected Software

Name Vendor Start Version End Version
Mac_os_x Apple 10.11 (including) 10.11.6 (excluding)
Mac_os_x Apple 10.12 (including) 10.12.6 (excluding)
Mac_os_x Apple 10.11.6 (including) 10.11.6 (including)
Mac_os_x Apple 10.11.6-security_update_2016-001 (including) 10.11.6-security_update_2016-001 (including)
Mac_os_x Apple 10.11.6-security_update_2016-002 (including) 10.11.6-security_update_2016-002 (including)
Mac_os_x Apple 10.11.6-security_update_2016-003 (including) 10.11.6-security_update_2016-003 (including)
Mac_os_x Apple 10.11.6-security_update_2017-001 (including) 10.11.6-security_update_2017-001 (including)
Mac_os_x Apple 10.11.6-security_update_2017-002 (including) 10.11.6-security_update_2017-002 (including)
Mac_os_x Apple 10.11.6-security_update_2017-003 (including) 10.11.6-security_update_2017-003 (including)
Mac_os_x Apple 10.11.6-security_update_2017-004 (including) 10.11.6-security_update_2017-004 (including)
Mac_os_x Apple 10.12.6 (including) 10.12.6 (including)
Mac_os_x Apple 10.12.6-security_update_2017-001 (including) 10.12.6-security_update_2017-001 (including)
Macos Apple * 10.13.2 (excluding)

References