CVE-2024-44276 — Cleartext Transmission of Sensitive Info in Apple IOS AND Ipados

CWE-319 — Cleartext Transmission of Sensitive Info4 documents4 sources
Severity
7.3HIGHNVD
EPSS
0.1%
top 78.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Apple IOS AND IpadosApple IpadosApple Iphone OS
Timeline
PublishedMar 17

Description

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 18.2 and iPadOS 18.2. A user in a privileged network position may be able to leak sensitive information.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:NExploitability: 2.1 | Impact: 5.2

Affected Packages3 packages

▶NVDapple/ipados< 18.2
▶CVEListV5apple/ios_and_ipados< 18.2
▶NVDapple/iphone_os< 18.2

🔴Vulnerability Details

2
CVEList
CVE-2024-44276: This issue was addressed by using HTTPS when sending information over the network↗2025-03-17
▶
GHSA
GHSA-pj4h-hmj2-pj85: This issue was addressed by using HTTPS when sending information over the network↗2025-03-17
▶

📋Vendor Advisories

1
Apple
CVE-2024-44276: iOS18.2 and iPadOS18.2↗2024-12-11
▶
CVE-2024-44276 — Apple IOS AND Ipados vulnerability | cvebase