PT-2019-19128 · Apple · Apple Macos

Jenny Sprenger + 1 · Published 2019-12-18 · Updated 2022-10-14 · CVE-2019-8634

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.14.5

Description An authentication issue was addressed with improved state management, potentially allowing a user to be unexpectedly logged in to another user’s account.

Recommendations For macOS versions prior to 10.14.5, update to macOS Mojave 10.14.5 to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2019-8634

Affected Products

Apple Macos

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-8634 · Security Note
• https://osv.dev/vulnerability/CVE-2019-8634 · Vendor Advisory
• https://support.apple.com/HT210119 · Vendor Advisory