An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. The issue involves the "Safari Login AutoFill" component. It allows remote attackers to read autofilled data by leveraging lack of a user-confirmation requirement.

The version of Apple iOS running on the mobile device is prior to 11.3. It is, therefore, affected by multiple vulnerabilities.

The version of Apple Safari installed on the remote host is prior to 11.1. It is, therefore, affected by multiple vulnerabilities as described in the HT208695 security advisory.

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 11.1. It is, therefore, affected by multiple vulnerabilities as described in the HT208695 security advisory.

ID	Name	Product	Family	Severity
700548	Apple iOS < 11.3 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	critical
700503	Apple Safari < 11.1 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
108812	Apple iOS < 11.3 Multiple Vulnerabilities	Nessus	Mobile Devices	critical
108805	macOS : Apple Safari < 11.1 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	high

Detections

Analytics

CVE-2018-4137

high

Tenable Plugins

critical

high

critical

high