CVE Vulnerabilities

CVE-2024-23242

Insertion of Sensitive Information into Log File

Published: Mar 08, 2024 | Modified: Nov 04, 2025
CVSS 3.x
3.3
LOW
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

A privacy issue was addressed by not logging contents of text fields. This issue is fixed in macOS Sonoma 14.4, iOS 17.4 and iPadOS 17.4. An app may be able to view Mail data.

Weakness

The product writes sensitive information to a log file.

Affected Software

NameVendorStart VersionEnd Version
Ipad_osApple*17.4 (excluding)
Iphone_osApple*17.4 (excluding)
MacosApple14.0 (including)14.4 (excluding)

Potential Mitigations

References