CVE-2016-7651

EUVD-2016-8501
An issue was discovered in certain Apple products. iOS before 10.2 is affected. watchOS before 3.1.1 is affected. The issue involves the "Accounts" component, which allows local users to bypass intended authorization restrictions by leveraging the mishandling of an app uninstall.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 18%
Affected Products (NVD)
VendorProductVersion
appleiphone_os
𝑥
≤ 10.1.1
applewatchos
𝑥
≤ 2.2.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/94851
http://www.securitytracker.com/id/1037429
https://lists.apple.com/archives/security-announce/2016/Dec/msg00001.html
https://support.apple.com/HT207422
https://support.apple.com/HT207487
http://www.securityfocus.com/bid/94851
http://www.securitytracker.com/id/1037429
https://lists.apple.com/archives/security-announce/2016/Dec/msg00001.html
https://support.apple.com/HT207422
https://support.apple.com/HT207487