CVE-2017-6976 in iOS

Summary

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to bypass intended access restrictions (for iCloud user records) via a crafted app.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 03/17/2017
• Disclosure: 04/03/2018
• Moderation: VulDB entry created
• Entries: VDB-115622 (1)
• CPE: ready
• CWE: CWE-284 (Confirmed)
• CVSS: 5.9
• EPSS: 0.00226
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-6976
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-6976
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-6976/