PT-2023-18991 · Apple · Macos Monterey+7

Cees Elzinga · Publicado 2023-01-23 · Atualizado 2025-03-11 · CVE-2023-23499

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.7.3 macOS Monterey versions prior to 12.6.3 macOS Ventura versions prior to 13.2 watchOS versions prior to 9.3 tvOS versions prior to 16.3 iOS versions prior to 16.3 iPadOS versions prior to 16.3

Description This issue allows an app to access user-sensitive data. The issue was addressed by enabling hardened runtime.

Recommendations For macOS Big Sur, update to version 11.7.3 to resolve the issue. For macOS Monterey, update to version 12.6.3 to resolve the issue. For macOS Ventura, update to version 13.2 to resolve the issue. For watchOS, update to version 9.3 to resolve the issue. For tvOS, update to version 16.3 to resolve the issue. For iOS, update to version 16.3 to resolve the issue. For iPadOS, update to version 16.3 to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2023-23499

Produtos afetados

Apple Macos

Ios

Ipados

Macos Big Sur

Macos Monterey

Macos Ventura

Tvos

Watchos

Referências · 11

• https://osv.dev/vulnerability/CVE-2023-23499 · Aviso do Fabricante
• https://support.apple.com/en-us/HT213599 · Aviso do Fabricante
• https://t.me/cvenotify/114213 · Publicação no Telegram
• https://support.apple.com/en-us/HT213604 · Aviso do Fabricante
• https://support.apple.com/en-us/HT213605 · Aviso do Fabricante
• https://t.me/cvenotify/45835 · Publicação no Telegram
• https://support.apple.com/en-us/HT213603 · Aviso do Fabricante
• https://support.apple.com/en-us/HT213601 · Aviso do Fabricante
• https://t.me/cibsecurity/59056 · Publicação no Telegram
• https://support.apple.com/en-us/HT213606 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-23499 · Nota de Segurança