CVE-2018-1000123

Ionic Team Cordova plugin iOS Keychain version before commit 18233ca25dfa92cca018b9c0935f43f78fd77fbf contains an Information Exposure Through Log Files (CWE-532) vulnerability in CDVKeychain.m that can result in login, password and other sensitive data leakage. This attack appear to be exploitable via Attacker must have access to victim's iOS logs. This vulnerability appears to have been fixed in after commit 18233ca25dfa92cca018b9c0935f43f78fd77fbf.

• CWE-532

• https://github.com/ionic-team/cordova-plugin-ios-keychain/pull/29/commits/980230645c8ea3b531b85401de5e4bca0f860e42#diff-936020291e4c2115faff0171f20672a4Patch, Third Party Advisory
• https://github.com/ionic-team/cordova-plugin-ios-keychain/pull/29/commits/980230645c8ea3b531b85401de5e4bca0f860e42#diff-936020291e4c2115faff0171f20672a4Patch, Third Party Advisory

Published

Mar 13, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000117Python Software Foundation CPython version From 3.2 until 3.…6.7
• CVE-2018-1000118Github Electron version Electron 1.8.2-beta.4 and earlier co…
• CVE-2018-1000119Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and ear…
• CVE-2018-1000120A buffer overflow exists in curl 7.12.3 to and including cur…
• CVE-2018-1000121A NULL pointer dereference exists in curl 7.21.0 to and incl…
• CVE-2018-1000122A buffer over-read exists in curl 7.20.0 to and including cu…
• CVE-2018-1000124I Librarian I-librarian version 4.8 and earlier contains a X…10
• CVE-2018-1000125inversoft prime-jwt version prior to version 1.3.0 or prior …
• CVE-2018-1000126Ajenti version 2 contains an Information Disclosure vulnerab…
• CVE-2018-1000127memcached version prior to 1.4.37 contains an Integer Overfl…
• CVE-2018-1000128Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-1000129An XSS vulnerability exists in the Jolokia agent version 1.3…