PT-2020-11280 · Apple · Apple Macos+1

Maya Sigal + 1 · Published 2020-10-27 · Updated 2020-11-02 · CVE-2019-8645

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.14.4 Security Update versions prior to 2019-002 for High Sierra and Sierra

Description An issue existed in the handling of encrypted Mail, which could allow an attacker in a privileged network position to intercept the contents of S/MIME-encrypted e-mail. This issue was addressed with improved isolation of MIME in Mail.

Recommendations For macOS versions prior to 10.14.4, update to macOS Mojave 10.14.4 or later. For High Sierra and Sierra, apply Security Update 2019-002 or later.

Fix

Related Identifiers

CVE-2019-8645

Affected Products

Mail

Apple Macos

References · 3

• https://support.apple.com/en-us/HT209600 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-8645 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-8645 · Security Note