PT-2015-3117 · Apple · Tvos+2

Macdefender · Publicado 2015-12-11 · Atualizado 2019-03-08 · CVE-2015-7058

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2 Apple tvOS versions prior to 9.1

Description The issue is related to improper validation of keychain item Access Control Lists (ACLs), which can be exploited by attackers using a crafted app to gain access to keychain items. This can potentially allow a remote attacker to obtain access to security keys.

Recommendations For Apple iOS versions prior to 9.2, update to version 9.2 or later. For Apple OS X versions prior to 10.11.2, update to version 10.11.2 or later. For Apple tvOS versions prior to 9.1, update to version 9.1 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2016-00327

CVE-2015-7058

Produtos afetados

Os X

Ios

Tvos

Referências · 9

• https://support.apple.com/HT205640 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html · Aviso do Fabricante
• https://support.apple.com/HT205637 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html · Aviso do Fabricante
• https://support.apple.com/HT205635 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2016-00327 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-7058 · Nota de Segurança
• http://securitytracker.com/id/1034344 · Nota