CVE-2017-13860: Medium severity macos high sierra vulnerability
An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. The issue involves the "Mail Drafts" component. It allows man-in-the-middle attackers to read e-mail content by leveraging mishandling of S/MIME credential encryption.
Other sources
Mail Drafts. An encryption issue existed with S/MIME credentials. The issue was addressed with additional checks and user control.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-13887
- CVE-2017-9798
- CVE-2017-13905
- CVE-2017-7172
- CVE-2017-13892
- CVE-2017-7171
- CVE-2017-7151
- CVE-2017-1000254
- CVE-2017-13872
- CVE-2017-15422
- CVE-2017-13883
- CVE-2017-7163
- CVE-2017-7155
- CVE-2017-13878
- CVE-2017-13875
- CVE-2017-7159
- CVE-2017-13848
- CVE-2017-13858
- CVE-2017-13847
- CVE-2017-7162
- CVE-2017-13904
- CVE-2017-5754
- CVE-2017-13862
- CVE-2017-13867
- CVE-2017-7173
- CVE-2017-13876
- CVE-2017-13855
- CVE-2017-13865
- CVE-2017-13868
- CVE-2017-13869
- CVE-2017-7154
- CVE-2017-13871
- CVE-2017-13860
- CVE-2017-3735
- CVE-2017-12837
- CVE-2017-7158
- CVE-2017-13911
- CVE-2017-13886
- CVE-2017-7164
- CVE-2017-2411
- CVE-2017-13879
- CVE-2017-13861
- CVE-2017-13880
- CVE-2017-13874
- CVE-2017-7152
- CVE-2017-13888
- CVE-2017-13891
- CVE-2017-13885
- CVE-2017-7165
- CVE-2017-13884
- CVE-2017-7153
- CVE-2017-7156
- CVE-2017-7157
- CVE-2017-13856
- CVE-2017-13870
- CVE-2017-7160
- CVE-2017-13866
- CVE-2017-13080
Frequently Asked Questions
What is CVE-2017-13860?
CVE-2017-13860 is a vulnerability that exists in certain Apple products, specifically iOS before 11.2 and macOS before 10.13.2, which allows man-in-the-middle attackers to read e-mail content by leveraging mishandling of S/MIME credential encryption in the "Mail Drafts" component.
How severe is CVE-2017-13860?
CVE-2017-13860 has a severity rating of 5.9 (medium).
What software versions are affected by CVE-2017-13860?
iOS versions before 11.2 and macOS versions before 10.13.2 are affected by CVE-2017-13860.
How can I mitigate the vulnerability CVE-2017-13860?
To mitigate CVE-2017-13860, it is recommended to update to iOS 11.2 or later and macOS 10.13.2 or later, as these versions address the issue.
Where can I find more information about CVE-2017-13860?
You can find more information about CVE-2017-13860 on the following websites: [SecurityFocus](http://www.securityfocus.com/bid/102097) and [SecurityTracker](http://www.securitytracker.com/id/1039953) and [SecurityTracker](http://www.securitytracker.com/id/1039966).