CVE Vulnerabilities

CVE-2024-44205

Insertion of Sensitive Information into Log File

Published: Oct 24, 2024 | Modified: Nov 05, 2024
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. A sandboxed app may be able to access sensitive user data in system logs.

Weakness

The product writes sensitive information to a log file.

Affected Software

NameVendorStart VersionEnd Version
IpadosApple*16.7.9 (excluding)
IpadosApple17.0 (including)17.6 (excluding)
Iphone_osApple*16.7.9 (excluding)
Iphone_osApple17.0 (including)17.6 (excluding)
MacosApple*12.7.6 (excluding)
MacosApple13.0 (including)13.6.8 (excluding)
MacosApple14.0 (including)14.6 (excluding)

Potential Mitigations

References