PT-2024-19791 · Apple · Xcode+1

Jacopo Carloni · Published 2024-03-05 · Updated 2024-12-09 · CVE-2024-23298

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Xcode (affected versions not specified)

Description A logic issue was addressed with improved state management. The issue allowed app bypass of Gatekeeper checks. An update for Xcode was released to fix this issue, available for macOS Sonoma 14+, with a release date of 2024-03-05.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2024-23298

Affected Products

Apple Macos

Xcode

References · 10

• https://support.apple.com/en-us/HT214092 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-23298 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-23298 · Security Note
• https://support.apple.com/kb/HT214092 · Note
• https://support.apple.com/en-us/120887 · Note
• https://t.me/cvenotify/103544 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23298 · Note
• https://twitter.com/XynikIT/status/1768728403555815777 · Twitter Post
• https://t.me/cvenotify/73995 · Telegram Post
• https://twitter.com/CVEnew/status/1768769211076112622 · Twitter Post