CVE-2018-4439 — Improper Input Validation in Apple Icloud

CWE-20 — Improper Input Validation7 documents4 sources
Severity
6.5MEDIUMNVD
EPSS
0.4%
top 39.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Apple IcloudApple Iphone OSApple Itunes+1 more
Timeline
PublishedApr 3
Latest updateMay 14

Description

A logic issue was addressed with improved validation. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages4 packages

▶NVDapple/icloud< 7.9
▶NVDapple/itunes< 12.9.2
▶NVDapple/safari< 12.0.2
▶NVDapple/iphone_os< 12.1.1

🔴Vulnerability Details

2
GHSA
GHSA-jq9x-84h3-f6ph: A logic issue was addressed with improved validation↗2022-05-14
▶
CVEList
CVE-2018-4439: A logic issue was addressed with improved validation↗2019-04-03
▶

📋Vendor Advisories

4
Apple
CVE-2018-4439: iCloud for Windows 7.9↗2018-12-05
▶
Apple
CVE-2018-4439: iTunes 12.9.2 for Windows↗2018-12-05
▶
Apple
CVE-2018-4439: Safari 12.0.2↗2018-12-05
▶
Apple
CVE-2018-4439: iOS 12.1.1↗2018-12-05
▶
CVE-2018-4439 — Improper Input Validation in Apple | cvebase