PT-2023-5807 · Apple · Safari+1

Kirin · Published 2023-09-26 · Updated 2023-10-12 · CVE-2023-40388

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Safari versions prior to macOS Sonoma 14

Description A privacy issue was addressed with improved handling of temporary files. This issue may allow a remote attacker to gain unauthorized access to protected information. Safari may save photos to an unprotected location.

Recommendations For versions prior to macOS Sonoma 14, update to macOS Sonoma 14 to resolve the issue. As a temporary workaround, consider restricting access to sensitive information when using Safari until the issue is resolved.

Fix

Weakness Enumeration

CWE-254

Related Identifiers

BDU:2023-06493

CVE-2023-40388

Affected Products

Apple Macos

Safari

References · 8

• https://bdu.fstec.ru/vul/2023-06493 · Security Note
• https://support.apple.com/en-us/HT213940 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-40388 · Security Note
• https://osv.dev/vulnerability/CVE-2023-40388 · Vendor Advisory
• https://rapid7.com/db/vulnerabilities/apple-osx-safari-cve-2023-40388 · Note
• https://twitter.com/CVEnew/status/1706767487419789418 · Twitter Post
• http://seclists.org/fulldisclosure/2023/Oct/3 · Note
• https://support.apple.com/kb/HT213940 · Note