An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. The issue involves the "Safari Login AutoFill" component. It allows remote attackers to read autofilled data by leveraging lack of a user-confirmation requirement.

The version of Apple iOS running on the mobile device is prior to 11.3. It is, therefore, affected by multiple vulnerabilities.

The version of Apple Safari installed on the remote host is prior to 11.1. It is, therefore, affected by multiple vulnerabilities as described in the HT208695 security advisory.

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 11.1. It is, therefore, affected by multiple vulnerabilities as described in the HT208695 security advisory.

ID	Name	Product	Family	Type	Severity
700548	Apple iOS < 11.3 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices		critical
700503	Apple Safari < 11.1 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients		high
108812	Apple iOS < 11.3 Multiple Vulnerabilities	Nessus	Mobile Devices	Local	critical
108805	macOS : Apple Safari < 11.1 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Local	high

Detections

Analytics

CVE-2018-4137

high

Tenable Plugins

critical

high

critical

high