PT-2021-5239 · Apple · Apple Macos

Jonathan Bar Or · Published 2021-08-24 · Updated 2025-01-14 · CVE-2021-30892

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 12.0.1 macOS Big Sur versions prior to 11.6.1 macOS Catalina versions prior to Security Update 2021-007

Description The issue is related to an inherited permissions problem, which may allow a malicious application to modify protected parts of the file system. This could potentially compromise the integrity of protected information. A malicious application may exploit this issue to gain unauthorized access and make changes to the file system.

Recommendations For macOS versions prior to 12.0.1, update to macOS Monterey 12.0.1 or later. For macOS Big Sur versions prior to 11.6.1, update to macOS Big Sur 11.6.1 or later. For macOS Catalina versions prior to Security Update 2021-007, apply Security Update 2021-007 or later.

Fix

Incorrect Permission

Weakness Enumeration

CWE-277

CWE-732

Related Identifiers

BDU:2021-06042

CVE-2021-30892

Affected Products

Apple Macos

References · 15

• https://osv.dev/vulnerability/CVE-2021-30892 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-30892 · Security Note
• https://bdu.fstec.ru/vul/2021-06042 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30892 · Note
• https://t.me/thehackernews/1621 · Telegram Post
• https://t.me/cybersecuritytechnologies/4701 · Telegram Post
• https://t.me/ckure/9874 · Telegram Post
• https://twitter.com/cybrhoodsentinl/status/1879224611021492487 · Twitter Post
• https://support.apple.com/en-us/103236 · Note
• https://support.apple.com/en-us/HT212872 · Note
• https://support.apple.com/en-us/HT212871 · Note
• https://support.apple.com/en-us/HT212869 · Note
• https://t.me/pentestingnews/13154 · Telegram Post
• https://t.me/cybersecuritytechnologies/4623 · Telegram Post
• https://support.apple.com/en-us/103164 · Note