PT-2023-8335 · Apple · Apple Macos+2

Gergely Kalman · Publicado 2023-09-26 · Atualizado 2023-10-05 · CVE-2023-41986

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14 iOS versions prior to 17 iPadOS versions prior to 17

Description The issue is related to insufficient access restrictions in the Music component of macOS, iPadOS, and iOS operating systems. Exploitation of this issue may allow an attacker to elevate their privileges. An app may be able to modify protected parts of the file system.

Recommendations For macOS versions prior to Sonoma 14, update to macOS Sonoma 14 to resolve the issue. For iOS versions prior to 17, update to iOS 17 to resolve the issue. For iPadOS versions prior to 17, update to iPadOS 17 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2024-00489

CVE-2023-41986

Produtos afetados

Apple Macos

Ios

Ipados

Referências · 11

• https://cybersecurity-help.cz/vdb/SB2023092664 · Nota
• https://osv.dev/vulnerability/CVE-2023-41986 · Aviso do Fabricante
• https://support.apple.com/en-us/HT213938 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2024-00489 · Nota de Segurança
• https://twitter.com/CVEnew/status/1706770242159231250 · Publicação no Twitter
• https://support.apple.com/kb/HT213938 · Nota
• http://seclists.org/fulldisclosure/2023/Oct/3 · Nota
• https://support.apple.com/kb/HT213940 · Nota
• http://seclists.org/fulldisclosure/2023/Oct/8 · Nota
• https://support.apple.com/en-us/HT213940 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-41986 · Nota de Segurança