Information disclosure in macOS - CVE-2018-4226
Published: June 4, 2018
Vulnerability identifier: #VU13174
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-4226
CWE-ID: CWE-200
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to obtain potentially sensitive information on the target system.
The vulnerability exists due to a state management error in the Security component. A local attacker can view sensitive user information.
Affected software
macOS
watchOS
Apple iOS
iCloud for Windows
iTunes
IBM Watson Explorer Deep Analytics Edition Analytical Components
watchOS
Apple iOS
iCloud for Windows
iTunes
IBM Watson Explorer Deep Analytics Edition Analytical Components
How to mitigate CVE-2018-4226
Update to version 10.13.4.
IBM Watson Explorer Deep Analytics Edition Analytical Components - update to 12.0.3.16
External References
Related Security Bulletins
- Multiple vulnerabilities in Apple macOS Sierra
- Multiple vulnerabilities in Apple iTunes
- Multiple vulnerabilities in Apple watchOS
- Multiple vulnerabilities in Apple iCloud
- Multiple vulnerabilities in Apple iOS
- Multiple vulnerabilities in IBM Watson Explorer Deep Analytics Edition Analytical Components