PT-2015-4093 · Apple · Os X

Publicado 2015-01-30 · Atualizado 2017-09-08 · CVE-2014-8827

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.2

Description The issue allows physically proximate attackers to obtain sensitive information by reading the screen when the system is woken from sleep, as the LoginWindow does not transition to the lock-screen state immediately.

Recommendations For Apple OS X versions prior to 10.10.2, update to version 10.10.2 or later to resolve the issue.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2014-8827

Produtos afetados

Os X

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2014-8827 · Nota de Segurança
• http://securitytracker.com/id/1031650 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100521 · Nota
• http://support.apple.com/HT204244 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html · Aviso do Fabricante