This issue was addressed with improved data access restriction. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6. Sensitive keychain data may be accessible from an iOS backup.
References
Link | Resource |
---|---|
https://support.apple.com/en-us/122371 | Vendor Advisory |
https://support.apple.com/en-us/122372 | Vendor Advisory |
https://support.apple.com/en-us/122378 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
07 Apr 2025, 13:39
Type | Values Removed | Values Added |
---|---|---|
References | () https://support.apple.com/en-us/122371 - Vendor Advisory | |
References | () https://support.apple.com/en-us/122372 - Vendor Advisory | |
References | () https://support.apple.com/en-us/122378 - Vendor Advisory | |
Summary |
|
|
First Time |
Apple iphone Os
Apple Apple visionos Apple ipados |
|
CPE | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* |
02 Apr 2025, 14:16
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
CWE | CWE-863 |
31 Mar 2025, 23:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-03-31 23:15
Updated : 2025-04-07 13:39
NVD link : CVE-2025-24221
Mitre link : CVE-2025-24221
CVE.ORG link : CVE-2025-24221
JSON object : View
Products Affected
apple
- ipados
- iphone_os
- visionos
CWE
CWE-863
Incorrect Authorization