CVE-2024-23228 - OpenCVE

This issue was addressed through improved state management. This issue is fixed in iOS 17.3 and iPadOS 17.3. Locked Notes content may have been unexpectedly unlocked.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://support.apple.com/en-us/HT214059

History

No history.

MITRE

Status: PUBLISHED

Assigner: apple

Published: 2024-04-24T16:43:44.304Z

Updated: 2024-08-01T22:59:32.108Z

Reserved: 2024-01-12T22:22:21.479Z

Link: CVE-2024-23228

Vulnrichment

Updated: 2024-08-01T22:59:32.108Z

NVD

Status : Awaiting Analysis

Published: 2024-04-24T17:15:47.073

Modified: 2024-07-03T01:47:38.910

Link: CVE-2024-23228

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-23228", "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "state": "PUBLISHED", "assignerShortName": "apple", "dateReserved": "2024-01-12T22:22:21.479Z", "datePublished": "2024-04-24T16:43:44.304Z", "dateUpdated": "2024-08-01T22:59:32.108Z"}, "containers": {"cna": {"problemTypes": [{"descriptions": [{"lang": "en", "description": "Locked Notes content may have been unexpectedly unlocked"}]}], "affected": [{"vendor": "Apple", "product": "iOS and iPadOS", "versions": [{"version": "unspecified", "status": "affected", "lessThan": "17.3", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "This issue was addressed through improved state management. This issue is fixed in iOS 17.3 and iPadOS 17.3. Locked Notes content may have been unexpectedly unlocked."}], "references": [{"url": "https://support.apple.com/en-us/HT214059"}], "providerMetadata": {"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "shortName": "apple", "dateUpdated": "2024-04-24T16:43:44.304Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-23228", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-04-29T19:51:01.640315Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:apple:ipados:17.3:*:*:*:*:*:*:*"], "vendor": "apple", "product": "ipados", "versions": [{"status": "affected", "version": "17.3"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:apple:ios:*:*:*:*:*:*:*:*"], "vendor": "apple", "product": "ios", "versions": [{"status": "affected", "version": "17.3"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:46:03.934Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:59:32.108Z"}, "title": "CVE Program Container", "references": [{"url": "https://support.apple.com/en-us/HT214059", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://support.apple.com/en-us/HT214059", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:59:32.108Z"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-23228", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-04-29T19:51:01.640315Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:apple:ipados:17.3:*:*:*:*:*:*:*"], "vendor": "apple", "product": "ipados", "versions": [{"status": "affected", "version": "17.3"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:apple:ios:*:*:*:*:*:*:*:*"], "vendor": "apple", "product": "ios", "versions": [{"status": "affected", "version": "17.3"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-04-29T19:52:47.559Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"affected": [{"vendor": "Apple", "product": "iOS and iPadOS", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "17.3", "versionType": "custom"}]}], "references": [{"url": "https://support.apple.com/en-us/HT214059"}], "descriptions": [{"lang": "en", "value": "This issue was addressed through improved state management. This issue is fixed in iOS 17.3 and iPadOS 17.3. Locked Notes content may have been unexpectedly unlocked."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Locked Notes content may have been unexpectedly unlocked"}]}], "providerMetadata": {"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "shortName": "apple", "dateUpdated": "2024-04-24T16:43:44.304Z"}}}, "cveMetadata": {"cveId": "CVE-2024-23228", "state": "PUBLISHED", "dateUpdated": "2024-08-01T22:59:32.108Z", "dateReserved": "2024-01-12T22:22:21.479Z", "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "datePublished": "2024-04-24T16:43:44.304Z", "assignerShortName": "apple"}, "dataVersion": "5.1"}