PT-2021-18793 · Apple · Macos Big Sur+1

Danilo Paffi Monteiro + 1 · Published 2021-05-24 · Updated 2021-09-16 · CVE-2021-30668

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.4

Description A person with physical access to a Mac may be able to bypass the Login Window during a software update. This issue was addressed with improved checks.

Recommendations For macOS Big Sur versions prior to 11.4, update to macOS Big Sur 11.4 to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2021-30668

Affected Products

Apple Macos

Macos Big Sur

References · 6

• https://support.apple.com/en-us/HT212529 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-30668 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-30668 · Security Note
• https://support.apple.com/en-us/103131 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30668 · Note
• https://t.me/cvenotify/21011 · Telegram Post