PT-2015-2294 · Apple · Os X

Nasser Alnasser · Published 2015-10-09 · Updated 2016-12-08 · CVE-2015-5901

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11

Description The issue is related to the Secure Empty Trash feature in Finder, which improperly deletes Trash files. This might allow local users to obtain sensitive information by reading storage media. For example, an attacker could read a flash drive to access protected information.

Recommendations For Apple OS X versions prior to 10.11, consider disabling the Secure Empty Trash feature in Finder until a patch is available to prevent potential exploitation. Restrict access to sensitive files and storage media to minimize the risk of information disclosure.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2015-11648

CVE-2015-5901

Affected Products

Os X

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-5901 · Security Note
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html · Vendor Advisory
• https://support.apple.com/HT205267 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11648 · Security Note
• http://securitytracker.com/id/1033703 · Note