CVE-2017-7147

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-10-23 · updated 2026-06-17
Weakness: CWE-319

Description

An issue was discovered in certain Apple products. The Apple Support app before 1.2 for iOS is affected. The issue involves the "Analytics" component. It allows remote attackers to obtain sensitive analytics information by leveraging its presence in a cleartext HTTP transmission to an Adobe Marketing Cloud server operated for Apple, as demonstrated by information about the installation date and time.

Affected products

Apple Support app: through 1.1.1

References

http://www.securityfocus.com/bid/101533
https://support.apple.com/HT208201
https://www.info-sec.ca/advisories/Apple-Support.html
http://www.securityfocus.com/bid/101533
https://support.apple.com/HT208201
https://www.info-sec.ca/advisories/Apple-Support.html

Get alerted when CVE-2017-7147 or the next vulnerability affects your stack