CVE-2017-13891

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

In iOS before 11.2, an inconsistent user interface issue was addressed through improved state management.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Jan 11, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-138927.5An issue existed in the handling of Contact sharing. This issue was addressed with improved handling of user information. This issue is fixeCVE-2017-139037.5An issue was discovered in certain Apple products. iOS before 11.2.1 is affected. tvOS before 11.2.1 is affected. The issue involves the "HoCVE-2017-139047.8An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affectCVE-2017-139058.1A race condition was addressed with additional validation. This issue is fixed in tvOS 11.2, iOS 11.2, macOS High Sierra 10.13.2, Security UCVE-2017-139067.8A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13.1, Security Update 201CVE-2017-139076.8A state management issue was addressed with improved state validation. This issue is fixed in macOS High Sierra 10.13.1, Security Update 201CVE-2017-139087.8An issue in handling file permissions was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13.1, Security UpdCVE-2017-139095.5An issue existed in the storage of sensitive tokens. This issue was addressed by placing the tokens in Keychain. This issue is fixed in macOCVE-2017-139105.5An access issue was addressed with additional sandbox restrictions on applications. This issue is fixed in macOS High Sierra 10.13. An appliCVE-2017-139117.8A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS X El Capitan 10.11.6 Security CVE-2017-13955.9IBM Security Identity Governance and Intelligence Virtual Appliance 5.2 through 5.2.3.2 could allow a remote attacker to obtain sensitive inCVE-2017-13968.1IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 specifies permissions for a security-critical resource in a way that
CVE-2017-13891: Medium severity, CVSS 6.5 | Vulnix