VULNERABILITY INTELLIGENCE

CVE-2018-4397

CVSS score4.3 MEDIUM
EPSS probability0.82%
CISA KEVNot currently listed
Published2019-04-03
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Analytics data was sent using HTTP rather than HTTPS. This was addressed by sending analytics data using HTTPS. This issue affected versions prior to Apple Support 2.4 for iOS.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references