Vulnerability · NVD
CVE-2012-3698
N/A
Apple Xcode before 4.4 does not properly compose a designated requirement (DR) during signing of programs that lack bundle identifiers, which allows remote attackers to read keychain entries via a crafted app, as demonstrated by the keychain entries of a (1) helper tool or (2) command-line tool.
EPSS
1.10%
above median
percentile 62.7%
Tracked apps referencing this CVE
For each app: the affected range, the fixing version, and where the tracked app stands today.
Vulnerable CPE configurations (27)
| Vendor | Product | Platform | Versions | CPE 2.3 URI |
|---|---|---|---|---|
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | ≤4.3.3 | cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:1.5.0:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:2.0.0:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:2.1.0:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:2.2.0:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:2.3.0:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:2.4.0:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:2.4.1:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:3.1:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:3.1.1:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:3.1.2:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:3.1.3:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:3.1.4:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:3.2.1:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:3.2.2:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:3.2.3:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:3.2.4:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:3.2.5:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:4.0:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:4.0.1:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:4.0.2:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:4.1.1:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:4.2:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:4.2.1:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:4.3:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:4.3.1:*:*:*:*:*:*:* |
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:apple:xcode:4.3.2:*:*:*:*:*:*:* |