CoreCVE
Back

CRITICAL

Ionic Team Cordova plugin iOS Keychain version before commit 18233ca25dfa92cca018b9c0935f43f78fd77fbf contains an Information Exposure Through Log Files (CWE-532) vulnerability in CDVKeychain.m that can result in login, password and other sensitive data leakage

Published Mar 13, 2018

Description

Ionic Team Cordova plugin iOS Keychain version before commit 18233ca25dfa92cca018b9c0935f43f78fd77fbf contains an Information Exposure Through Log Files (CWE-532) vulnerability in CDVKeychain.m that can result in login, password and other sensitive data leakage. This attack appear to be exploitable via Attacker must have access to victim's iOS logs. This vulnerability appears to have been fixed in after commit 18233ca25dfa92cca018b9c0935f43f78fd77fbf.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-532

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Mar 13, 2018
Updated Sep 16, 2024
Reserved Mar 13, 2018
Link CVE-2018-1000123
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-1000123
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-1000123
ENISA EUVD
Assigner mitre
Published Mar 13, 2018
Updated Sep 16, 2024
Exploited since n/a
Link EUVD-2018-1847
EUVD-2018-1847