CVE-2025-31267

An authentication issue was addressed with improved state management

Medium · published July 10, 2025

CVSS v3.1
4.6
EPSS
0%
Percentile
10.7
In the wild
Unconfirmed
What it is

An authentication issue was addressed with improved state management. This issue is fixed in App Store Connect 3.0. An attacker with physical access to an unlocked device may be able to view sensitive user information.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00210 · 10.7th percentile
Published
2025-07-10T22:23Z
EPSS history
Timeline
  • 10 JUL 22:23Z
    An authentication issue was addressed with improved state management
    cvelistv5