CVE-2018-4440 — Improper Input Validation in Apple Icloud

CWE-20 — Improper Input Validation7 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.4%
top 39.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Apple IcloudApple Iphone OSApple Itunes+1 more
Timeline
PublishedApr 3
Latest updateMay 14

Description

A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages4 packages

▶NVDapple/icloud< 7.9
▶NVDapple/itunes< 12.9.2
▶NVDapple/safari< 12.0.2
▶NVDapple/iphone_os< 12.1.1

🔴Vulnerability Details

2
GHSA
GHSA-r843-xf68-84q9: A logic issue was addressed with improved state management↗2022-05-14
▶
CVEList
CVE-2018-4440: A logic issue was addressed with improved state management↗2019-04-03
▶

📋Vendor Advisories

4
Apple
CVE-2018-4440: Safari 12.0.2↗2018-12-05
▶
Apple
CVE-2018-4440: iCloud for Windows 7.9↗2018-12-05
▶
Apple
CVE-2018-4440: iTunes 12.9.2 for Windows↗2018-12-05
▶
Apple
CVE-2018-4440: iOS 12.1.1↗2018-12-05
▶
CVE-2018-4440 — Improper Input Validation in Apple | cvebase