PT-2015-2294 · Apple · Os X

Nasser Alnasser · Publicado 2015-10-09 · Atualizado 2016-12-08 · CVE-2015-5901

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11

Description The issue is related to the Secure Empty Trash feature in Finder, which improperly deletes Trash files. This might allow local users to obtain sensitive information by reading storage media. For example, an attacker could read a flash drive to access protected information.

Recommendations For Apple OS X versions prior to 10.11, consider disabling the Secure Empty Trash feature in Finder until a patch is available to prevent potential exploitation. Restrict access to sensitive files and storage media to minimize the risk of information disclosure.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2015-11648

CVE-2015-5901

Produtos afetados

Os X

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-5901 · Nota de Segurança
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html · Aviso do Fabricante
• https://support.apple.com/HT205267 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-11648 · Nota de Segurança
• http://securitytracker.com/id/1033703 · Nota