{"api_version":"1","generated_at":"2026-07-23T07:29:57+00:00","cve":"CVE-2017-2391","urls":{"html":"https://cve.report/CVE-2017-2391","api":"https://cve.report/api/cve/CVE-2017-2391.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2017-2391","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-2391"},"summary":{"title":"CVE-2017-2391","description":"An issue was discovered in certain Apple products. Pages before 6.1, Numbers before 4.1, and Keynote before 7.1 on macOS and Pages before 3.1, Numbers before 3.1, and Keynote before 3.1 on iOS are affected. The issue involves the \"Export\" component. It allows users to bypass iWork PDF password protection by leveraging use of 40-bit RC4.","state":"PUBLISHED","assigner":"apple","published_at":"2017-04-02 01:59:00","updated_at":"2025-04-20 01:37:25"},"problem_types":["CWE-326","n/a"],"metrics":[{"version":"3.0","source":"nvd@nist.gov","type":"Primary","score":"5.3","severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","data":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securitytracker.com/id/1038135","name":"http://www.securitytracker.com/id/1038135","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Apple Pages RC4 Encryption Lets Users Obtain Potentially Sensitive Information from Password Protected Exported PDFs - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/97126","name":"http://www.securityfocus.com/bid/97126","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"Apple iOS/Mac CVE-2017-2391 Information Disclosure Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securitytracker.com/id/1038134","name":"http://www.securitytracker.com/id/1038134","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Apple Numbers RC4 Encryption Lets Users Obtain Potentially Sensitive Information from Password Protected Exported PDFs - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id/1038136","name":"http://www.securitytracker.com/id/1038136","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Apple Keynote RC4 Encryption Lets Users Obtain Potentially Sensitive Information from Password Protected Exported PDFs - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://support.apple.com/HT207595","name":"https://support.apple.com/HT207595","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"About the security content of Pages 6.1, Numbers 4.1, and Keynote 7.1 for Mac and Pages 3.1, Numbers 3.1, and Keynote 3.1 for iOS - Apple Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-2391","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-2391","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2017","cve_id":"2391","vulnerable":"1","versionEndIncluding":"3.0.5","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apple","cpe5":"keynote","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"iphone_os","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"2391","vulnerable":"1","versionEndIncluding":"7.0.5","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apple","cpe5":"keynote","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"mac_os_x","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"2391","vulnerable":"1","versionEndIncluding":"3.0.5","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apple","cpe5":"numbers","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"iphone_os","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"2391","vulnerable":"1","versionEndIncluding":"4.0.5","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apple","cpe5":"numbers","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"mac_os_x","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"2391","vulnerable":"1","versionEndIncluding":"3.0.5","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apple","cpe5":"pages","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"iphone_os","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"2391","vulnerable":"1","versionEndIncluding":"6.0.5","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apple","cpe5":"pages","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"mac_os_x","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-05T13:55:05.427Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1038135","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id/1038135"},{"name":"1038134","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id/1038134"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://support.apple.com/HT207595"},{"name":"1038136","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id/1038136"},{"name":"97126","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/97126"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2017-03-28T00:00:00.000Z","descriptions":[{"lang":"en","value":"An issue was discovered in certain Apple products. Pages before 6.1, Numbers before 4.1, and Keynote before 7.1 on macOS and Pages before 3.1, Numbers before 3.1, and Keynote before 3.1 on iOS are affected. The issue involves the \"Export\" component. It allows users to bypass iWork PDF password protection by leveraging use of 40-bit RC4."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-11T09:57:01.000Z","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple"},"references":[{"name":"1038135","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id/1038135"},{"name":"1038134","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id/1038134"},{"tags":["x_refsource_CONFIRM"],"url":"https://support.apple.com/HT207595"},{"name":"1038136","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id/1038136"},{"name":"97126","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/97126"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"product-security@apple.com","ID":"CVE-2017-2391","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An issue was discovered in certain Apple products. Pages before 6.1, Numbers before 4.1, and Keynote before 7.1 on macOS and Pages before 3.1, Numbers before 3.1, and Keynote before 3.1 on iOS are affected. The issue involves the \"Export\" component. It allows users to bypass iWork PDF password protection by leveraging use of 40-bit RC4."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1038135","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1038135"},{"name":"1038134","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1038134"},{"name":"https://support.apple.com/HT207595","refsource":"CONFIRM","url":"https://support.apple.com/HT207595"},{"name":"1038136","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1038136"},{"name":"97126","refsource":"BID","url":"http://www.securityfocus.com/bid/97126"}]}}}},"cveMetadata":{"assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","assignerShortName":"apple","cveId":"CVE-2017-2391","datePublished":"2017-04-02T01:36:00.000Z","dateReserved":"2016-12-01T00:00:00.000Z","dateUpdated":"2024-08-05T13:55:05.427Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2017-04-02 01:59:00","lastModifiedDate":"2025-04-20 01:37:25","problem_types":["CWE-326","n/a"],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:keynote:*:*:*:*:*:mac_os_x:*:*","versionEndIncluding":"7.0.5","matchCriteriaId":"273F12FD-AAC9-46B3-82F3-EB35BC2E8D2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:numbers:*:*:*:*:*:mac_os_x:*:*","versionEndIncluding":"4.0.5","matchCriteriaId":"4812E8C9-77B5-4CF4-B607-0A8F06FB4FDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:pages:*:*:*:*:*:mac_os_x:*:*","versionEndIncluding":"6.0.5","matchCriteriaId":"BA958C04-7A2F-4C2F-B4B6-8FA4B23E9C21"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:keynote:*:*:*:*:*:iphone_os:*:*","versionEndIncluding":"3.0.5","matchCriteriaId":"1BDD2098-B985-4C76-9248-B8CFD4B3ABA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:numbers:*:*:*:*:*:iphone_os:*:*","versionEndIncluding":"3.0.5","matchCriteriaId":"CB559D00-B617-4F94-9B8D-47959517BBBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:pages:*:*:*:*:*:iphone_os:*:*","versionEndIncluding":"3.0.5","matchCriteriaId":"B1919558-5038-4EA3-88C1-4FD359B1537E"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2017","CveId":"2391","Ordinal":"1","Title":"CVE-2017-2391","CVE":"CVE-2017-2391","Year":"2017"},"notes":[{"CveYear":"2017","CveId":"2391","Ordinal":"1","NoteData":"An issue was discovered in certain Apple products. Pages before 6.1, Numbers before 4.1, and Keynote before 7.1 on macOS and Pages before 3.1, Numbers before 3.1, and Keynote before 3.1 on iOS are affected. The issue involves the \"Export\" component. It allows users to bypass iWork PDF password protection by leveraging use of 40-bit RC4.","Type":"Description","Title":"CVE-2017-2391"},{"CveYear":"2017","CveId":"2391","Ordinal":"2","NoteData":"2017-04-01","Type":"Other","Title":"Published"},{"CveYear":"2017","CveId":"2391","Ordinal":"3","NoteData":"2017-07-11","Type":"Other","Title":"Modified"}]}}}