PT-2023-8484 · Apple · Apple Macos

Berke Kırbaş + 1 · Publicado 2023-09-26 · Atualizado 2024-01-17 · CVE-2023-40393

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 14

Description An authentication issue was addressed with improved state management, allowing photos in the Hidden Photos Album to be viewed without authentication. The issue is related to a lack of authentication for a critical function, which could be exploited by a remote attacker to view the "Hidden Photos Album" without authentication.

Recommendations For versions prior to macOS 14, update to macOS Sonoma 14 to resolve the issue. As a temporary workaround, consider restricting access to the Hidden Photos Album until the update is applied.

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

BDU:2024-00963

CVE-2023-40393

Produtos afetados

Apple Macos

Referências · 8

• https://support.apple.com/en-us/120950 · Nota
• https://bdu.fstec.ru/vul/2024-00963 · Nota de Segurança
• https://support.apple.com/en-us/HT213940 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-40393 · Nota de Segurança
• https://twitter.com/CVEnew/status/1745211704060125386 · Publicação no Twitter
• https://support.apple.com/kb/HT213940 · Nota
• https://osv.dev/vulnerability/CVE-2023-40393 · Aviso do Fabricante
• https://support.apple.com/en-us/120949 · Nota