Security Advisory

CVE-2017-2423

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-04-02 01:36:00

Last updated 2024-08-05 13:55:05

Assigner apple

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. The issue involves the "Security" component. It allows remote attackers to bypass intended access restrictions by leveraging a successful result from a SecKeyRawVerify API call with an empty signature.

← Browse all CVEs View on cve.org ↗