Lucene search

[email protected]CVE-2020-9941

HistoryOct 27, 2020 - 9:15 p.m.

CVE-2020-9941

2020-10-2721:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2020-9941

macos

catalina

high sierra

mojave

security update

nvd

remote attacker

application state

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

6.7 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.1%

JSON

This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave. A remote attacker may be able to unexpectedly alter application state.

CPENameOperatorVersion
apple:iphone_osapple iphone oslt14.0
apple:watchosapple watchoslt7.0
apple:ipadosapple ipadoslt14.0
apple:macosapple macoseq11.0
apple:mac_os_xapple mac os xlt10.15.7
apple:mac_os_xapple mac os xlt10.14.6
apple:mac_os_xapple mac os xeq10.13.6

CPE	Name	Operator	Version
apple:iphone_os	apple iphone os	lt	14.0
apple:watchos	apple watchos	lt	7.0
apple:ipados	apple ipados	lt	14.0
apple:macos	apple macos	eq	11.0
apple:mac_os_x	apple mac os x	lt	10.15.7
apple:mac_os_x	apple mac os x	lt	10.14.6
apple:mac_os_x	apple mac os x	eq	10.13.6

References

seclists.org/fulldisclosure/2020/Dec/32

seclists.org/fulldisclosure/2020/Nov/20

seclists.org/fulldisclosure/2020/Nov/21

seclists.org/fulldisclosure/2020/Nov/22

support.apple.com/en-us/HT211849

support.apple.com/kb/HT211844

support.apple.com/kb/HT211850

support.apple.com/kb/HT211931

Social References

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

6.7 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.1%

JSON

Related for CVE-2020-9941

prion1 nessus2 apple8 qualysblog1