Skip to content
OpenAdvisories
Unscored CVE-2017-2399 EUVD-2017-11582GHSA-r59g-26cw-mxwr

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Pasteboard" component. It allows ph…

Published Apr 2, 2017 · Updated Aug 5, 2024 · Assigned by apple

Description

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Pasteboard" component. It allows physically proximate attackers to read the pasteboard by leveraging the use of an encryption key derived only from the hardware UID (rather than that UID in addition to the user passcode).

References