exploitDog

CVE-2024-44166

Опубликовано: 17 сент. 2024

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to access user-sensitive data.

Ссылки

https://support.apple.com/en-us/121234
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121238
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121247
Release Notes
Vendor Advisory
http://seclists.org/fulldisclosure/2024/Sep/33
http://seclists.org/fulldisclosure/2024/Sep/40
http://seclists.org/fulldisclosure/2024/Sep/41

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия до 13.7 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 14.0 (включая) до 14.7 (исключая)

EPSS

Процентиль: 9%

0.00033

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-532

CWE-532

Связанные уязвимости

GHSA-x9r8-886r-r4qm

CVSS3: 5.5

github

больше 1 года назад

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to access user-sensitive data.

EPSS

Процентиль: 9%

0.00033

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-532

CWE-532