CVE-2024-54488

A logic issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13.7.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sonoma 14.7.2, macOS Sequoia 15.2. Photos in the Hidden Photos Album may be viewed without authentication.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

05 Feb 2025, 16:15

Type Values Removed Values Added
CWE CWE-863

30 Jan 2025, 17:04

Type Values Removed Values Added
CPE cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
First Time Apple iphone Os
Apple macos
Apple
Apple ipados
References () https://support.apple.com/en-us/121837 - () https://support.apple.com/en-us/121837 - Release Notes
References () https://support.apple.com/en-us/121838 - () https://support.apple.com/en-us/121838 - Release Notes
References () https://support.apple.com/en-us/121839 - () https://support.apple.com/en-us/121839 - Release Notes
References () https://support.apple.com/en-us/121840 - () https://support.apple.com/en-us/121840 - Release Notes
References () https://support.apple.com/en-us/121842 - () https://support.apple.com/en-us/121842 - Release Notes
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.3
Summary
  • (es) Se solucionó un problema de lógica mejorando la gestión de archivos. Este problema se solucionó en macOS Ventura 13.7.2, iOS 18.2 y iPadOS 18.2, iPadOS 17.7.3, macOS Sonoma 14.7.2 y macOS Sequoia 15.2. Las fotos del Álbum de fotos ocultas se pueden ver sin autenticación.

27 Jan 2025, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-01-27 22:15

Updated : 2025-02-05 16:15


NVD link : CVE-2024-54488

Mitre link : CVE-2024-54488

CVE.ORG link : CVE-2024-54488


JSON object : View

Products Affected

apple

  • iphone_os
  • ipados
  • macos
CWE
NVD-CWE-noinfo CWE-863

Incorrect Authorization