CVE-2017-2383 (LOW)

Vendor	Product	Version range	Fixed in
apple	icloud	<= 6.1.1	—
apple	icloud_for_windows	—	—
apple	ios	—	—
apple	itunes	<= 12.5.5.5	—
apple	itunes_12.6_for_windows	—	—
apple	macos_sierra	—	—
apple	tvos	—	—
apple	watchos	—	—

Apple

CVE-2017-2383: iCloud for Windows 6.2

vendor_apple·2017-03-28·CVSS 3.1

CVE-2017-2383 [LOW] CVE-2017-2383: iCloud for Windows 6.2 Apple Security Update: About the security content of iCloud for Windows 6.2 Product: iCloud for Windows Version: 6.2 CVE: CVE-2017-2383 Component: APNs Server Impact: An attacker in a privileged network position can track a user's activity Description: A client certificate was sent in plaintext. This issue was addressed through improved certificate handling.

Apple

CVE-2017-2383: iTunes 12.6 for Windows

vendor_apple·2017-03-21·CVSS 3.1

CVE-2017-2383 [LOW] CVE-2017-2383: iTunes 12.6 for Windows Apple Security Update: About the security content of iTunes 12.6 for Windows Product: iTunes 12.6 for Windows CVE: CVE-2017-2383 Component: APNs Server Impact: An attacker in a privileged network position can track a user's activity Description: A client certificate was sent in plaintext. This issue was addressed through improved certificate handling.

Apple

CVE-2017-2383: macOS Sierra 10.12.3

vendor_apple·2017-01-23·CVSS 3.1

CVE-2017-2383 [LOW] CVE-2017-2383: macOS Sierra 10.12.3 Apple Security Update: About the security content of macOS Sierra 10.12.3 Product: macOS Sierra Version: 10.12.3 CVE: CVE-2017-2383 Component: APNs Server Impact: An attacker in a privileged network position can track a user's activity Description: A client certificate was sent in plaintext. This issue was addressed through improved certificate handling.

Apple

CVE-2017-2383: watchOS 3.1.3

vendor_apple·2017-01-23·CVSS 3.1

CVE-2017-2383 [LOW] CVE-2017-2383: watchOS 3.1.3 Apple Security Update: About the security content of watchOS 3.1.3 Product: watchOS Version: 3.1.3 CVE: CVE-2017-2383 Component: APNs Server Impact: An attacker in a privileged network position can track a user's activity Description: A client certificate was sent in plaintext. This issue was addressed through improved certificate handling.

Apple

CVE-2017-2383: iOS 10.2.1

vendor_apple·2017-01-23·CVSS 3.1

CVE-2017-2383 [LOW] CVE-2017-2383: iOS 10.2.1 Apple Security Update: About the security content of iOS 10.2.1 Product: iOS Version: 10.2.1 CVE: CVE-2017-2383 Component: APNs Server Impact: An attacker in a privileged network position can track a user's activity Description: A client certificate was sent in plaintext. This issue was addressed through improved certificate handling.

Apple

CVE-2017-2383: tvOS 10.1.1

vendor_apple·2017-01-23·CVSS 3.1

CVE-2017-2383 [LOW] CVE-2017-2383: tvOS 10.1.1 Apple Security Update: About the security content of tvOS 10.1.1 Product: tvOS Version: 10.1.1 CVE: CVE-2017-2383 Component: APNs Server Impact: An attacker in a privileged network position can track a user's activity Description: A client certificate was sent in plaintext. This issue was addressed through improved certificate handling.

GHSA

GHSA-crwx-qjww-2w2r: An issue was discovered in certain Apple products

ghsa_unreviewed·2022-05-17

CVE-2017-2383 [LOW] GHSA-crwx-qjww-2w2r: An issue was discovered in certain Apple products An issue was discovered in certain Apple products. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. The issue involves cleartext client-certificate transmission in the "APNs Server" component. It allows man-in-the-middle attackers to track users via correlation with this certificate.

CVE-2017-2383: An issue was discovered in certain Apple products. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. The issue involves…

Affected