CVE-2017-2385 in Safari

Summary

An issue was discovered in certain Apple products. Safari before 10.1 is affected. The issue involves the "Safari Login AutoFill" component. It allows local users to obtain access to locked keychain items via unspecified vectors.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 12/01/2016
• Disclosure: 04/01/2017
• Moderation: VulDB entry created
• Entries: VDB-98567 (1)
• CPE: ready
• CWE: CWE-200 (Confirmed)
• CVSS: 4.4
• EPSS: 0.00063
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-2385
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-2385
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-2385/