PT-2023-8357 · Apple · Apple Macos

Mickey Jin · CVE-2023-41077 · Publicado 2023-10-25 · Atualizado 2024-11-08

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.6.1

Description The issue is related to insufficient access controls in the Image Capture component of the macOS operating system. It may allow an attacker to disclose protected user information. An app may be able to access protected user data due to this issue.

Recommendations For versions prior to 13.6.1, update to macOS Ventura 13.6.1 to resolve the issue. As a temporary workaround, consider restricting access to sensitive user data until the update is applied.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-264

CWE-863

Identificadores relacionados

BDU:2024-00546

CVE-2023-41077

Produtos afetados

Apple Macos

Referências · 10

• http://seclists.org/fulldisclosure/2023/Oct/26 · Nota
• https://support.apple.com/en-us/120950 · Nota
• https://support.apple.com/en-us/HT213985 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-41077 · Nota de Segurança
• https://support.apple.com/en-us/109050 · Nota
• https://twitter.com/jochenleidner/status/1854897950918373733 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2024-00546 · Nota de Segurança
• https://support.apple.com/kb/HT213985 · Aviso do Fabricante
• https://t.me/cvenotify/59978 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-41077 · Aviso do Fabricante