CVE-2018-4397

—

CVSS 3.0

4.3 medium

EPSS

<1%p55

Published

Apr 3, 2019 (Apr 3, 2019)

Modified

Jun 17, 2026

Description

Analytics data was sent using HTTP rather than HTTPS. This was addressed by sending analytics data using HTTPS. This issue affected versions prior to Apple Support 2.4 for iOS.

Vendors: apple
Products: apple support
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.