Lucene search

AppleCVE-2023-42887

HistoryJan 23, 2024 - 1:15 a.m.

CVE-2023-42887

2024-01-2301:15:09

apple

web.nvd.nist.gov

cve-2023-42887

access issue

sandbox restrictions

macos ventura

macos sonoma

CVSS3

6.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

20.7%

JSON

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.6.4, macOS Sonoma 14.2. An app may be able to read arbitrary files.

Affected configurations

Nvd

Vulners

Node

applemacosRange13.0–13.6.4

applemacosRange14.0–14.2

VendorProductVersionCPE
applemacos*cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	macos	*	cpe:2.3:o:apple:macos::::::::

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "macOS",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "13.6",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "macOS",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "14.2",
        "versionType": "custom"
      }
    ]
  }
]

References

seclists.org/fulldisclosure/2024/Jan/37

support.apple.com/en-us/HT214036

support.apple.com/en-us/HT214058

support.apple.com/kb/HT214036

CVSS3

6.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

20.7%

JSON

Related for CVE-2023-42887