CVE-2018-4293 Other in iOS, macOS, tvOS, watchOS, iTunes for Windows, iCloud for Windows

Medium 5.3 Published 3 Apr 2019 Updated 5 Aug 2024

An improper cookie management issue in Apple operating systems and applications could allow security bypass, requiring an upgrade to patched versions.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-4293?

CVE-2018-4293 is a medium-severity vulnerability in Apple Icloud, published on 3 Apr 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A cookie management issue was addressed with improved checks. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

Weakness: CWE-20

Which versions are affected by CVE-2018-4293?

It affects 6 products.

Products include Apple Icloud, Apple Iphone Os, Apple Itunes, Apple Mac Os X, Apple Tvos, Apple Watchos.

How do I fix CVE-2018-4293?

No fix has been published for CVE-2018-4293 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-4293 being exploited?

There is no known exploitation of CVE-2018-4293 in the wild and no public exploit code.

All Apple Icloud vulnerabilities

Sources

Also known as GHSA-w67j-3f4j-998m.