PT-2023-6714 · Apple · Macos Ventura+1

Wenchao Li + 1 · Published 2023-02-13 · Updated 2025-03-11 · CVE-2023-23522

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS Ventura versions prior to 13.2.1

Description The issue is related to insecure temporary files in the Shortcuts component of macOS Ventura, which may allow an attacker to access confidential information. This privacy issue can be exploited by an app to observe unprotected user data due to improper handling of temporary files.

Recommendations For macOS Ventura versions prior to 13.2.1, update to version 13.2.1 to resolve the issue. As a temporary workaround, consider restricting access to sensitive data until the update is applied.

Fix

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

CWE-377

Related Identifiers

BDU:2023-07485

CVE-2023-23522

Affected Products

Apple Macos

Macos Ventura

References · 8

• https://osv.dev/vulnerability/CVE-2023-23522 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07485 · Security Note
• https://support.apple.com/en-us/HT213633 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-23522 · Security Note
• https://support.apple.com/en-us/102804 · Note
• https://t.me/cibsecurity/59062 · Telegram Post
• https://vuldb.com/?id.220947 · Note
• https://t.me/cvenotify/114323 · Telegram Post