PT-2019-19231 · Apple · Apple Macos

Scott Knight + 1 · Publicado 2019-12-18 · Atualizado 2024-08-26 · CVE-2019-8805

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.1

Description A validation issue existed in the entitlement verification, allowing an application to potentially execute arbitrary code with system privileges. This issue was addressed with improved validation of the process entitlement.

Recommendations For versions prior to 10.15.1, update to macOS Catalina 10.15.1 to resolve the issue. As a temporary workaround, consider restricting access to the EndpointSecurity framework until the update is applied.

Correção

Identificadores relacionados

CVE-2019-8805

Produtos afetados

Apple Macos

Referências · 9

• https://t.me/rnetsec/20596 · Publicação no Telegram
• https://twitter.com/reverseame/status/1828304444456378700 · Publicação no Twitter
• https://support.apple.com/HT210722 · Aviso do Fabricante
• https://t.me/thebugbountyhunter/8960 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2019-8805 · Aviso do Fabricante
• https://twitter.com/sysbraykr/status/1827952775101358252 · Publicação no Twitter
• https://t.me/cybersecuritytechnologies/10876 · Publicação no Telegram
• https://t.me/defcon_news/124619 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-8805 · Nota de Segurança