First published: Thu Mar 29 2018(Updated: )
Web App. A cookie management issue was addressed with improved state management.
Credit: Ben Compton Jason Colley Cerner Corporation product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iOS, iPadOS, and watchOS | <11.3 | 11.3 |
iStyle @cosme iPhone OS | <11.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
The vulnerability ID of this issue is CVE-2018-4110.
CVE-2018-4110 has a severity rating of 9.8 (Critical).
iOS before version 11.3 is affected by CVE-2018-4110.
CVE-2018-4110 allows remote attackers to bypass intended restrictions on cookie persistence.
Yes, a fix is available. Users should update to iOS version 11.3 or later.