PT-2022-7122 · Apple+8 · Macos Monterey+11

Gerhard Muth · Published 2022-12-06 · Updated 2025-02-03 · CVE-2023-32360

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions CUPS versions (affected versions not specified) macOS Big Sur versions prior to 11.7.7 macOS Monterey versions prior to 12.6.6 macOS Ventura versions prior to 13.4

Description The issue is related to an authentication problem, which may allow an unauthenticated user to access recently printed documents due to inadequate state management. This could potentially lead to unauthorized access to confidential data.

Recommendations For CUPS, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For macOS Big Sur versions prior to 11.7.7, update to macOS Big Sur 11.7.7 to resolve the issue. For macOS Monterey versions prior to 12.6.6, update to macOS Monterey 12.6.6 to resolve the issue. For macOS Ventura versions prior to 13.4, update to macOS Ventura 13.4 to resolve the issue.

Out of bounds Read

Improper Authentication

Weakness Enumeration

CWE-125

CWE-287

Related Identifiers

ALSA-2023:4838

ALSA-2023:4864

BDU:2023-07653

CESA-2023_4766

CESA-2023_4864

CVE-2023-32360

DLA-3594-1

MGASA-2023-0284

OPENSUSE-SU-2023_3707-1

OPENSUSE-SU-2024:13250-1

RHSA-2023:4765

RHSA-2023:4766

RHSA-2023:4768

RHSA-2023:4769

RHSA-2023:4770

RHSA-2023:4771

RHSA-2023:4838

RHSA-2023:4864

RHSA-2023_4766

RHSA-2023_4838

RHSA-2023_4864

RLSA-2023:4838

RLSA-2023:4864

ROSA-SA-2025-2555

SUSE-SU-2023:3706-1

SUSE-SU-2023:3707-1

SUSE-SU-2023:3707-2

SUSE-SU-2025:20090-1

USN-6361-1

USN-6361-2

Affected Products

Almalinux

Astra Linux

Centos

Linuxmint

Apple Macos

Red Hat

Rocky Linux

Suse

Ubuntu

Macos Big Sur

Macos Monterey

Macos Ventura

References · 71

• https://support.apple.com/en-us/HT213759 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2023:4864 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-32360 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-4864.html · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2023:4838 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-4766.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-32360 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6361-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13250-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32360 · Security Note
• https://osv.dev/vulnerability/USN-6361-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07653 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-32360 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-0416SE47 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3594-1 · Vendor Advisory