CVE-2018-4221

EUVD-2018-16007
An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the "Security" component. It allows web sites to track users by leveraging the transmission of S/MIME client certificates.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 50%
Affected Products (NVD)
VendorProductVersion
appleiphone_os
𝑥
< 11.4
applemac_os_x
𝑥
< 10.13.5
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/104897
http://www.securitytracker.com/id/1041027
https://support.apple.com/HT208848
https://support.apple.com/HT208849
http://www.securityfocus.com/bid/104897
http://www.securitytracker.com/id/1041027
https://support.apple.com/HT208848
https://support.apple.com/HT208849