CVE-2013-1031

Опубликовано: 16 сент. 2013

Источник: nvd

CVSS2: 3.3

EPSS Низкий

Описание

Power Management in Apple Mac OS X before 10.8.5 does not properly perform locking upon occurrences of a power assertion, which allows physically proximate attackers to bypass intended access restrictions by visiting an unattended workstation on which a locking failure had prevented the startup of the screen saver.

Ссылки

http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html
Patch
Vendor Advisory
http://support.apple.com/kb/HT5880
Patch
Vendor Advisory
http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html
Patch
Vendor Advisory
http://support.apple.com/kb/HT5880
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Версия до 10.8.4 (включая)

cpe:2.3:o:apple:mac_os_x:10.8.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.8.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.8.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.8.3:*:*:*:*:*:*:*

EPSS

Процентиль: 17%

0.00055

Низкий

3.3 Low

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-v394-3cq8-g794

github

больше 3 лет назад