CVE-2017-13860

Reference Links

• https://support.apple.com/en-us/HT208331 (Advisory)
• https://support.apple.com/en-us/HT208334 (Advisory)
• http://www.securityfocus.com/bid/102097
• http://www.securitytracker.com/id/1039953
• http://www.securitytracker.com/id/1039966
• https://support.apple.com/HT208331
• https://support.apple.com/HT208334

Parent vulnerabilities

(Appears in the following advisories)

• HT208331
• HT208334

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2017-13887
• CVE-2017-9798
• CVE-2017-13905
• CVE-2017-7172
• CVE-2017-13892
• CVE-2017-7171
• CVE-2017-7151
• CVE-2017-1000254
• CVE-2017-13872
• CVE-2017-15422
• CVE-2017-13883
• CVE-2017-7163
• CVE-2017-7155
• CVE-2017-13878
• CVE-2017-13875
• CVE-2017-7159
• CVE-2017-13848
• CVE-2017-13858
• CVE-2017-13847
• CVE-2017-7162
• CVE-2017-13904
• CVE-2017-5754
• CVE-2017-13862
• CVE-2017-13867
• CVE-2017-7173
• CVE-2017-13876
• CVE-2017-13855
• CVE-2017-13865
• CVE-2017-13868
• CVE-2017-13869
• CVE-2017-7154
• CVE-2017-13871
• CVE-2017-13860
• CVE-2017-3735
• CVE-2017-12837
• CVE-2017-7158
• CVE-2017-13911
• CVE-2017-13886
• CVE-2017-7164
• CVE-2017-2411
• CVE-2017-13879
• CVE-2017-13861
• CVE-2017-13880
• CVE-2017-13874
• CVE-2017-7152
• CVE-2017-13888
• CVE-2017-13891
• CVE-2017-13885
• CVE-2017-7165
• CVE-2017-13884
• CVE-2017-7153
• CVE-2017-7156
• CVE-2017-7157
• CVE-2017-13856
• CVE-2017-13870
• CVE-2017-7160
• CVE-2017-13866
• CVE-2017-13080

Frequently Asked Questions

• What is CVE-2017-13860?

  CVE-2017-13860 is a vulnerability that exists in certain Apple products, specifically iOS before 11.2 and macOS before 10.13.2, which allows man-in-the-middle attackers to read e-mail content by leveraging mishandling of S/MIME credential encryption in the "Mail Drafts" component.

• How severe is CVE-2017-13860?

  CVE-2017-13860 has a severity rating of 5.9 (medium).

• What software versions are affected by CVE-2017-13860?

  iOS versions before 11.2 and macOS versions before 10.13.2 are affected by CVE-2017-13860.

• How can I mitigate the vulnerability CVE-2017-13860?

  To mitigate CVE-2017-13860, it is recommended to update to iOS 11.2 or later and macOS 10.13.2 or later, as these versions address the issue.

• Where can I find more information about CVE-2017-13860?

  You can find more information about CVE-2017-13860 on the following websites: [SecurityFocus](http://www.securityfocus.com/bid/102097) and [SecurityTracker](http://www.securitytracker.com/id/1039953) and [SecurityTracker](http://www.securitytracker.com/id/1039966).