PT-2020-8922 · Apple · Macos Mojave+6

Vitaly Cheptsov · Published 2020-10-27 · Updated 2020-11-02 · CVE-2018-4433

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions macOS Mojave versions prior to 10.14.4 Security Update versions prior to 2019-002 High Sierra Security Update versions prior to 2019-002 Sierra watchOS versions prior to 5 iOS versions prior to 12 tvOS versions prior to 12

Description A configuration issue was addressed with additional restrictions. A malicious application may be able to modify protected parts of the file system.

Recommendations For macOS Mojave versions prior to 10.14.4, update to macOS Mojave 10.14.4 or later. For Security Update versions prior to 2019-002 High Sierra, apply Security Update 2019-002 High Sierra or later. For Security Update versions prior to 2019-002 Sierra, apply Security Update 2019-002 Sierra or later. For watchOS versions prior to 5, update to watchOS 5 or later. For iOS versions prior to 12, update to iOS 12 or later. For tvOS versions prior to 12, update to tvOS 12 or later.

Fix

Related Identifiers

CVE-2018-4433

Affected Products

High Sierra

Security Update

Sierra

Ios

Macos Mojave

Tvos

Watchos

References · 8

• https://support.apple.com/en-us/HT209106 · Vendor Advisory
• https://support.apple.com/en-us/HT209108 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-4433 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-4433 · Security Note
• https://support.apple.com/en-us/HT209107 · Vendor Advisory
• https://support.apple.com/en-us/HT209600 · Vendor Advisory
• https://support.apple.com/en-us/HT209139 · Vendor Advisory
• https://t.me/cibsecurity/15663 · Telegram Post