PT-2023-8688 · Apple · Macos Sonoma+6
Kirin
·
Publicado
2023-09-26
·
Atualizado
2025-06-17
·
CVE-2023-40528
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Apple iOS versions prior to 17
Apple iPadOS versions prior to 17
Apple tvOS versions prior to 17
Apple watchOS versions prior to 10
Apple macOS Sonoma versions prior to 14
Apple macOS Ventura versions prior to 13.6.4
Description
The issue is related to insufficient access control in the Core Data component of the operating systems, allowing an app to bypass Privacy preferences. This could potentially enable an attacker to circumvent privacy settings.
Recommendations
For Apple iOS versions prior to 17, update to iOS 17 or later.
For Apple iPadOS versions prior to 17, update to iPadOS 17 or later.
For Apple tvOS versions prior to 17, update to tvOS 17 or later.
For Apple watchOS versions prior to 10, update to watchOS 10 or later.
For Apple macOS Sonoma versions prior to 14, update to macOS Sonoma 14 or later.
For Apple macOS Ventura versions prior to 13.6.4, update to macOS Ventura 13.6.4 or later.
Correção
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Apple Macos
Ios
Ipados
Macos Sonoma
Macos Ventura
Tvos
Watchos