CVE-2024-23210 is a vulnerability affecting Apple iOS and iPadOS where an application could access a user's phone number by reading system logs that did not properly redact this sensitive information. Apple resolved this issue by improving the redaction of sensitive data in system logs. The fix is available in iOS 17.3 and iPadOS 17.3. The CVSS v3.1 base score is 3.3 (low severity), reflecting limited confidentiality impact without integrity or availability effects. This vulnerability is part of a broader set of security fixes in the iOS 17.3 and iPadOS 17.3 releases.

An attacker with the ability to run an app on a vulnerable device could potentially access the user's phone number by reading system logs. The impact is limited to disclosure of this sensitive information only, with no known ability to execute code or affect system integrity or availability. The vulnerability is rated low severity with a CVSS score of 3.3.

This vulnerability is fixed in iOS 17.3 and iPadOS 17.3. Users and administrators should update affected devices to these versions or later to ensure the issue is remediated. Since this is a client-side vulnerability in Apple operating systems, applying the official Apple update is the recommended and effective mitigation.