Lucene search
HistoryOct 23, 2015 - 9:59 p.m.
CVE-2015-7016
cve-2015-7016
apple
os x
managed configuration
entitlement restrictions
privileges
provisioning profiles
security vulnerability
6.1 Medium
AI Score
Confidence
Low
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
30.0%
The MCX Application Restrictions component in Apple OS X before 10.11.1, when Managed Configuration is enabled, mishandles provisioning profiles, which allows attackers to bypass intended entitlement restrictions and gain privileges via a crafted developer-signed app.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:mac_os_x | apple mac os x | le | 10.11.0 |
Related
prion
prion
Code injection
2015-10-23 21:59:00
openvas
openvas
Apple Mac OS X Multiple Vulnerabilities-02 (HT205375)
2018-05-15 00:00:00
nessus
nessus
Mac OS X Multiple Vulnerabilities (Security Updates 2015-004 / 2015-007)
2015-11-10 00:00:00
Mac OS X < 10.11.1 Multiple Vulnerabilities
2015-10-29 00:00:00
Mac OS X 10.9.5 or later < 10.11.1 Multiple Vulnerabilities
2016-05-27 00:00:00
securityvulns
securityvulns
APPLE-SA-2015-10-21-4 OS X El Capitan 10.11.1 and Security Update 2015-007
2015-10-25 00:00:00
Apple Mac OS X / Mac EFI / OS X Server multiple security vulnerabilities
2015-10-25 00:00:00
6.1 Medium
AI Score
Confidence
Low
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
30.0%
Related for CVE-2015-7016