An authentication issue was addressed with improved state management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. Photos in the Hidden Photos Album may be viewed without authentication.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/120949 | |
| https://support.apple.com/en-us/120950 | |
| https://support.apple.com/en-us/HT213940 | Release Notes Vendor Advisory |
Configurations
History
11 Apr 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) An authentication issue was addressed with improved state management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. Photos in the Hidden Photos Album may be viewed without authentication. | |
| References |
|
21 Nov 2024, 08:19
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.apple.com/en-us/HT213940 - Release Notes, Vendor Advisory |
17 Jan 2024, 18:30
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Apple macos
Apple |
|
| References | () https://support.apple.com/en-us/HT213940 - Release Notes, Vendor Advisory | |
| CWE | CWE-306 |
10 Jan 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-10 22:15
Updated : 2025-04-11 15:15
NVD link : CVE-2023-40393
Mitre link : CVE-2023-40393
CVE.ORG link : CVE-2023-40393
JSON object : View
Products Affected
apple
- macos
CWE
CWE-306
Missing Authentication for Critical Function