PT-2019-19231 · Apple · Apple Macos

Scott Knight + 1 · Published 2019-12-18 · Updated 2024-08-26 · CVE-2019-8805

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.1

Description A validation issue existed in the entitlement verification, allowing an application to potentially execute arbitrary code with system privileges. This issue was addressed with improved validation of the process entitlement.

Recommendations For versions prior to 10.15.1, update to macOS Catalina 10.15.1 to resolve the issue. As a temporary workaround, consider restricting access to the EndpointSecurity framework until the update is applied.

Fix

Related Identifiers

CVE-2019-8805

Affected Products

Apple Macos

References · 9

• https://support.apple.com/HT210722 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-8805 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-8805 · Security Note
• https://t.me/rnetsec/20596 · Telegram Post
• https://twitter.com/reverseame/status/1828304444456378700 · Twitter Post
• https://t.me/thebugbountyhunter/8960 · Telegram Post
• https://twitter.com/sysbraykr/status/1827952775101358252 · Twitter Post
• https://t.me/cybersecuritytechnologies/10876 · Telegram Post
• https://t.me/defcon_news/124619 · Telegram Post