PT-2023-6714 · Apple · Macos Ventura+1

Wenchao Li + 1 · Publicado 2023-02-13 · Atualizado 2025-03-11 · CVE-2023-23522

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS Ventura versions prior to 13.2.1

Description The issue is related to insecure temporary files in the Shortcuts component of macOS Ventura, which may allow an attacker to access confidential information. This privacy issue can be exploited by an app to observe unprotected user data due to improper handling of temporary files.

Recommendations For macOS Ventura versions prior to 13.2.1, update to version 13.2.1 to resolve the issue. As a temporary workaround, consider restricting access to sensitive data until the update is applied.

Correção

Insecure Storage of Sensitive Information

Enumeração de Fraquezas

CWE-922

CWE-377

Identificadores relacionados

BDU:2023-07485

CVE-2023-23522

Produtos afetados

Apple Macos

Macos Ventura

Referências · 8

• https://osv.dev/vulnerability/CVE-2023-23522 · Aviso do Fabricante
• https://support.apple.com/en-us/102804 · Nota
• https://t.me/cibsecurity/59062 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2023-07485 · Nota de Segurança
• https://vuldb.com/?id.220947 · Nota
• https://support.apple.com/en-us/HT213633 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-23522 · Nota de Segurança
• https://t.me/cvenotify/114323 · Publicação no Telegram