PT-2019-10812 · Apple · Apple Macos

Arjen Hendrikse · Published 2019-04-03 · Updated 2020-08-24 · CVE-2018-4178

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13.4

Description A permissions issue existed where execute permission was incorrectly granted. This was addressed with improved permission validation.

Recommendations For versions prior to 10.13.4, update to macOS High Sierra 10.13.4 or later to resolve the issue.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2018-4178

Affected Products

Apple Macos

References · 3

• https://support.apple.com/kb/HT208937 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-4178 · Security Note
• https://osv.dev/vulnerability/CVE-2018-4178 · Vendor Advisory