PT-2015-4093 · Apple · Os X

Published 2015-01-30 · Updated 2017-09-08 · CVE-2014-8827

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.2

Description The issue allows physically proximate attackers to obtain sensitive information by reading the screen when the system is woken from sleep, as the LoginWindow does not transition to the lock-screen state immediately.

Recommendations For Apple OS X versions prior to 10.10.2, update to version 10.10.2 or later to resolve the issue.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2014-8827

Affected Products

Os X

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2014-8827 · Security Note
• http://support.apple.com/HT204244 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html · Vendor Advisory
• http://securitytracker.com/id/1031650 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100521 · Note