Lucene search
AppleCVE-2015-5849HistoryOct 09, 2015 - 5:59 a.m.
CVE-2015-5849
2015-10-0905:59:06
CWE-264
apple
web.nvd.nist.gov
32
cve-2015-5849
appleevents
filtering implementation
apple os x
security vulnerability
access restrictions
screen-sharing connection
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
5.9
Confidence
Low
EPSS
0.001
Percentile
42.3%
The filtering implementation in AppleEvents in Apple OS X before 10.11 mishandles attempts to send events to a different user, which allows attackers to bypass intended access restrictions by leveraging a screen-sharing connection.
Affected configurations
Node
applemac_os_xRange≤10.10.5
Related
cvelist
cvelist
CVE-2015-5849
2015-10-09 01:00:00
nvd
nvd
CVE-2015-5849
2015-10-09 05:59:06
prion
prion
Design/Logic Flaw
2015-10-09 05:59:00
openvas
openvas
Apple Mac OS X Multiple Vulnerabilities-02 (Oct 2015)
2015-10-29 00:00:00
securityvulns
securityvulns
APPLE-SA-2015-09-30-3 OS X El Capitan 10.11
2015-10-05 00:00:00
Apple Mac OS X / Mac EFI / OS X Server multiple security vulnerabilities
2015-10-25 00:00:00
nessus
nessus
Mac OS X < 10.11 Multiple Vulnerabilities (GHOST)
2015-10-05 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
5.9
Confidence
Low
EPSS
0.001
Percentile
42.3%
Related for CVE-2015-5849