{"id":"CVE-2023-42845","state":"PUBLISHED","title":"An authentication issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. Photos in the Hidden Photos Album may be v","description":"An authentication issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. Photos in the Hidden Photos Album may be viewed without authentication.","publishedAt":"2023-10-25T18:32:10.790Z","updatedAt":"2025-02-13T17:09:49.099Z","severity":null,"assigner":"apple","products":["Apple macOS","Apple iOS and iPadOS"],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"14.1","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"unspecified","status":"affected","lessThan":"17.1","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/HT213984","https://support.apple.com/en-us/HT213982","https://support.apple.com/kb/HT213982","https://support.apple.com/kb/HT213984","http://seclists.org/fulldisclosure/2023/Oct/19","http://seclists.org/fulldisclosure/2023/Oct/24"],"weaknesses":[],"ingestedAt":"2026-10-29T20:06:17.512Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/42xxx/CVE-2023-42845.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-42845","state":"PUBLISHED","datePublished":"2023-10-25T18:32:10.790Z","dateUpdated":"2025-02-13T17:09:49.099Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2023-09-14T19:05:11.450Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An authentication issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. Photos in the Hidden Photos Album may be viewed without authentication."}],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"14.1","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"unspecified","status":"affected","lessThan":"17.1","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/HT213984"},{"url":"https://support.apple.com/en-us/HT213982"},{"url":"https://support.apple.com/kb/HT213982"},{"url":"https://support.apple.com/kb/HT213984"},{"url":"http://seclists.org/fulldisclosure/2023/Oct/19"},{"url":"http://seclists.org/fulldisclosure/2023/Oct/24"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"Photos in the Hidden Photos Album may be viewed without authentication"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2023-10-25T19:06:58.671Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.apple.com/en-us/HT213984","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213982","tags":["x_transferred"]},{"url":"https://support.apple.com/kb/HT213982","tags":["x_transferred"]},{"url":"https://support.apple.com/kb/HT213984","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/19","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/24","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T19:30:24.823Z"}},{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"apple","product":"macos","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"14.1","versionType":"custom"}],"cpes":["cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*"]},{"vendor":"apple","product":"ios_and_ipados","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"17.1","versionType":"custom"}],"cpes":["cpe:2.3:o:apple:ios_and_ipados:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-10T15:14:33.759113Z","id":"CVE-2023-42845","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-10T15:17:12.632Z"}}]}}}