NVD

Id
18190  
Name
CVE-2016-1842  
Description
MapKit in Apple iOS before 9.3.2, OS X before 10.11.5, and watchOS before 2.2.1 does not use HTTPS for shared links, which allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-05-20  
Modified Date
2016-12-01  
Seq
2016-1842  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
100402 18190 CVE-2016-1842 APPLE-SA-2016-05-16-2  View
100403 18190 CVE-2016-1842 APPLE-SA-2016-05-16-3  View
100404 18190 CVE-2016-1842 APPLE-SA-2016-05-16-4  View
100405 18190 CVE-2016-1842 1035890  View
100406 18190 CVE-2016-1842 https://support.apple.com/HT206566  View
100407 18190 CVE-2016-1842 https://support.apple.com/HT206567  View
100408 18190 CVE-2016-1842 https://support.apple.com/HT206568  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2064 JVNDB-2016-002837 複数の Apple 製品の MapKit における重要な情報を取得される脆弱性 Apple iOS、OS X および watchOS の MapKit は、共有リンクに HTTPS を使用しないため、重要な情報を取得される脆弱性が存在します。 CVE-2016-1842 88348 CVE-2016-1842 18190 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002837.html 2016-05-16 2016-05-23 View