PT-2020-17226 · Apple · Apple Macos+3

R3Ggi + 1 · Published 2020-12-14 · Updated 2021-09-03 · CVE-2020-29621

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to Big Sur 11.1 Security Update versions prior to 2020-001 on Catalina Security Update versions prior to 2020-007 on Mojave

Description A malicious application may be able to bypass Privacy preferences due to this issue. The issue was addressed with improved checks.

Recommendations For macOS versions prior to Big Sur 11.1, update to macOS Big Sur 11.1. For Catalina, apply Security Update 2020-001. For Mojave, apply Security Update 2020-007.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2020-29621

Affected Products

Big Sur

Catalina

Apple Macos

Mojave

References · 7

• https://osv.dev/vulnerability/CVE-2020-29621 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-29621 · Security Note
• https://support.apple.com/en-us/HT212011 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29621 · Note
• https://t.me/cybersecuritytechnologies/4215 · Telegram Post
• https://t.me/cvenotify/12544 · Telegram Post
• https://support.apple.com/en-us/103052 · Note