PT-2020-17748 · Apple · Apple Macos

Theevilbit · Published 2020-10-27 · Updated 2020-10-29 · CVE-2020-3855

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.3 Security Update 2020-001 Mojave (affected versions not specified) Security Update 2020-001 High Sierra (affected versions not specified)

Description An access issue was addressed with improved access restrictions. A malicious application may be able to overwrite arbitrary files.

Recommendations For macOS versions prior to 10.15.3, update to macOS Catalina 10.15.3 or later. For Security Update 2020-001 Mojave, apply Security Update 2020-001 or later. For Security Update 2020-001 High Sierra, apply Security Update 2020-001 or later.

Fix

Related Identifiers

CVE-2020-3855

Affected Products

Apple Macos

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-3855 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3855 · Vendor Advisory
• https://support.apple.com/en-us/HT210919 · Vendor Advisory