CVE-2017-13864: Infoleak

Reference Links

• https://support.apple.com/en-us/HT208326 (Advisory)
• http://www.securityfocus.com/bid/102192
• http://www.securitytracker.com/id/1040013
• https://support.apple.com/HT208326
• https://support.apple.com/HT208328

Parent vulnerabilities

(Appears in the following advisories)

• HT208326

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2017-13864
• CVE-2017-7172
• CVE-2017-7151
• CVE-2017-15422
• CVE-2017-13885
• CVE-2017-7165
• CVE-2017-13884
• CVE-2017-7156
• CVE-2017-7157
• CVE-2017-13856
• CVE-2017-13870
• CVE-2017-7160
• CVE-2017-13866
• CVE-2017-7153

Frequently Asked Questions

• What is the vulnerability ID for this issue?

  The vulnerability ID for this issue is CVE-2017-13864.

• What is the severity of CVE-2017-13864?

  The severity of CVE-2017-13864 is medium.

• Which Apple products are affected by CVE-2017-13864?

  iCloud before version 7.2 on Windows and iTunes before version 12.7.2 on Windows are affected by CVE-2017-13864.

• How can a man-in-the-middle attacker exploit CVE-2017-13864?

  A man-in-the-middle attacker can exploit CVE-2017-13864 by leveraging mishandling of client certificates to track users.

• Are Microsoft Windows systems vulnerable to CVE-2017-13864?

  No, Microsoft Windows systems are not vulnerable to CVE-2017-13864.