Lucene search
HistoryApr 10, 2015 - 2:59 p.m.
CVE-2015-1146
cve-2015-1146
code signing
apple os x
security flaw
access restrictions
5.8 Medium
AI Score
Confidence
Low
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
5.2%
The Code Signing implementation in Apple OS X before 10.10.3 does not properly validate signatures, which allows local users to bypass intended access restrictions via a crafted bundle, a different vulnerability than CVE-2015-1145.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:mac_os_x | apple mac os x | lt | 10.10.3 |
Related
prion
prion
Code injection
2015-04-10 14:59:00
Code injection
2015-04-10 14:59:00
cve
cve
CVE-2015-1145
2015-04-10 14:59:00
kaspersky
kaspersky
KLA10540 Multiple vulnerability in Apple OS X
2015-04-10 00:00:00
openvas
openvas
Apple Mac OS X Multiple Vulnerabilities-01 (Apr 2015)
2015-04-24 00:00:00
nessus
nessus
Mac OS X Multiple Vulnerabilities (Security Update 2015-004) (FREAK)
2015-04-10 00:00:00
Mac OS X 10.10.x < 10.10.3 Multiple Vulnerabilities (FREAK)
2015-04-10 00:00:00
securityvulns
securityvulns
APPLE-SA-2015-04-08-2 OS X 10.10.3 and Security Update 2015-004
2015-04-09 00:00:00
Apple Mac OS X multiple security vulnerabilities
2015-04-13 00:00:00
5.8 Medium
AI Score
Confidence
Low
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2015-1146