CVE-2017-13892
Estado: ModificadaAlta (7.5)—
An issue existed in the handling of Contact sharing. This issue was addressed with improved handling of user information. This issue is fixed in macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan. Sharing contact information may lead to unexpected data sharing.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.93%
- Percentil entre todas las CVEs puntuadas: 59
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2017-13892",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "product-security@apple.com",
"affectedData": [
{
"vendor": "Apple",
"product": "macOS",
"versions": [
{
"status": "affected",
"version": "unspecified",
"lessThan": "10.13",
"versionType": "custom"
}
]
}
]
}
],
"published": "2021-12-23T20:15:08.177",
"references": [
{
"url": "https://support.apple.com/en-us/HT208331",
"tags": [
"Vendor Advisory"
],
"source": "product-security@apple.com"
},
{
"url": "https://support.apple.com/en-us/HT208331",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An issue existed in the handling of Contact sharing. This issue was addressed with improved handling of user information. This issue is fixed in macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan. Sharing contact information may lead to unexpected data sharing."
},
{
"lang": "es",
"value": "Se presentó un problema en el manejo del uso Compartido de Contactos. Este problema se abordó con un manejo de la información del usuario mejorada. Este problema se ha corregido en macOS High Sierra versión 10.13.2, Security Update 2017-002 Sierra y Security Update 2017-005 El Capitan. Compartir información de contacto puede conllevar a un intercambio de datos no esperado"
}
],
"lastModified": "2026-06-17T01:05:21.030",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF1A141D-7F31-4175-A5CD-1EB52BE6D8A1",
"versionEndExcluding": "10.11.6",
"versionStartIncluding": "10.11"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D01E4F9E-15B1-4470-8FAF-DB5DCD69CA5C",
"versionEndExcluding": "10.12.6",
"versionStartIncluding": "10.12"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.11.6:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B7FC88F-6216-480F-A27D-9A2D2D8F3034"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-001:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C47360D3-4390-4F31-BA82-7A4F38408E68"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-002:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DEB1158A-9D65-463A-A8AF-D946E95EB2D5"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-003:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28B4E7A2-3022-4B23-A068-FFE58C3A449B"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-001:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7EE0F7C4-53B7-4554-8F4D-AAB417A1569F"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-002:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C03A4DED-974B-4FCE-92F7-83DA939E0847"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-003:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47EF9186-8EBD-441B-B2DD-FB18C072EEBC"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-004:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79665061-B72E-4AE9-97FF-C570A2C6BA23"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.12.6:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6536473A-2ECF-4806-AC02-2386552BEAB1"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.12.6:security_update_2017-001:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8EFC700-879E-4C5C-8A21-064114E9D7B2"
},
{
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D84FBE0D-9C0E-41BA-A297-832BA03083D2",
"versionEndExcluding": "10.13.2"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "product-security@apple.com"
}