CVE-2018-4123

LOW

Description

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves alarm and timer handling in the "Clock" component. It allows physically proximate attackers to discover the iTunes e-mail address.

References

http://www.securityfocus.com/bid/103578

http://www.securitytracker.com/id/1040604

https://support.apple.com/HT208693

Details

Source: MITRE

Published: 2018-04-03

Updated: 2018-05-04

Type: CWE-200

Risk Information

CVSS v2.0

Base Score: 2.1

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

Impact Score: 2.9

Exploitability Score: 3.9

Severity: LOW

CVSS v3.0

Base Score: 2.4

Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score: 1.4

Exploitability Score: 0.9

Severity: LOW