CVE-2018-4445 — Sensitive Information Exposure in Apple Safari

CWE-200 — Sensitive Information Exposure5 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.2%
top 59.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple Iphone OSApple Safari
Timeline
PublishedApr 3
Latest updateMay 14

Description

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶NVDapple/safari< 12.0.2
▶NVDapple/iphone_os< 12.1.1

🔴Vulnerability Details

2
GHSA
GHSA-mw88-7r4g-9xw8: "Clear History and Website Data" did not clear the history↗2022-05-14
▶
CVEList
CVE-2018-4445: "Clear History and Website Data" did not clear the history↗2019-04-03
▶

📋Vendor Advisories

2
Apple
CVE-2018-4445: iOS 12.1.1↗2018-12-05
▶
Apple
CVE-2018-4445: Safari 12.0.2↗2018-12-05
▶
CVE-2018-4445 — Sensitive Information Exposure in Apple | cvebase