CVE-2024-54488

A logic issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13.7.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sonoma 14.7.2, macOS Sequoia 15.2. Photos in the Hidden Photos Album may be viewed without authentication.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

05 Feb 2025, 16:15

Type Values Removed Values Added
CWE CWE-863

30 Jan 2025, 17:04

Type Values Removed Values Added
CWE NVD-CWE-noinfo
First Time Apple iphone Os
Apple
Apple macos
Apple ipados
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.3
CPE cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
References () https://support.apple.com/en-us/121837 - () https://support.apple.com/en-us/121837 - Release Notes
References () https://support.apple.com/en-us/121838 - () https://support.apple.com/en-us/121838 - Release Notes
References () https://support.apple.com/en-us/121839 - () https://support.apple.com/en-us/121839 - Release Notes
References () https://support.apple.com/en-us/121840 - () https://support.apple.com/en-us/121840 - Release Notes
References () https://support.apple.com/en-us/121842 - () https://support.apple.com/en-us/121842 - Release Notes
Summary
  • (es) Se solucionó un problema de lógica mejorando la gestión de archivos. Este problema se solucionó en macOS Ventura 13.7.2, iOS 18.2 y iPadOS 18.2, iPadOS 17.7.3, macOS Sonoma 14.7.2 y macOS Sequoia 15.2. Las fotos del Álbum de fotos ocultas se pueden ver sin autenticación.

27 Jan 2025, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-01-27 22:15

Updated : 2025-02-05 16:15


NVD link : CVE-2024-54488

Mitre link : CVE-2024-54488

CVE.ORG link : CVE-2024-54488


JSON object : View

Products Affected

apple

  • ipados
  • iphone_os
  • macos
CWE
NVD-CWE-noinfo CWE-863

Incorrect Authorization