CVE-2024-23244

Опубликовано: 08 мар. 2024

Источник: nvd

CVSS3: 7.8

CVSS3: 6.7

EPSS Низкий

Описание

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4. An app from a standard user account may be able to escalate privilege after admin user login.

Ссылки

http://seclists.org/fulldisclosure/2024/Mar/21
Mailing List
http://seclists.org/fulldisclosure/2024/Mar/23
Mailing List
https://support.apple.com/en-us/HT214083
Vendor Advisory
https://support.apple.com/en-us/HT214084
Vendor Advisory
http://seclists.org/fulldisclosure/2024/Mar/21
Mailing List
http://seclists.org/fulldisclosure/2024/Mar/23
Mailing List
https://support.apple.com/en-us/HT214083
Vendor Advisory
https://support.apple.com/en-us/HT214084
Vendor Advisory
https://support.apple.com/kb/HT214083
https://support.apple.com/kb/HT214084

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 12.0 (включая) до 12.7.4 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 14.0 (включая) до 14.4 (исключая)

EPSS

Процентиль: 1%

0.00012

Низкий

7.8 High

CVSS3

6.7 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-2c8c-h5pf-cx5h

CVSS3: 6.7

github

почти 2 года назад

EPSS

Процентиль: 1%

0.00012

Низкий

7.8 High

CVSS3

6.7 Medium

CVSS3

Дефекты

NVD-CWE-noinfo