Unscored CVE-2023-42847 EUVD-2023-47268GHSA-fwv4-p95x-f2mc

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An attacker may be ab…

Published Oct 25, 2023 · Updated Feb 13, 2025 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Product: macOS Platform: iOS Platform: macOS

Description

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An attacker may be able to access passkeys without authentication.

Affected products

Vendor	Product	Affected	Fixed
Apple	macOS	unspecified – < 14.1	14.1
Apple	iOS and iPadOS	unspecified – < 17.1	17.1

Advisories 2

WID-SEC-2023-2753 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 29, 2024
WID-SEC-2023-2754 Apple iOS und Apple iPadOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 22, 2024

References

https://support.apple.com/en-us/HT213984
https://support.apple.com/en-us/HT213982
https://support.apple.com/kb/HT213982
https://support.apple.com/kb/HT213984
http://seclists.org/fulldisclosure/2023/Oct/19
http://seclists.org/fulldisclosure/2023/Oct/24