Lucene search
HistoryFeb 27, 2023 - 8:15 p.m.
CVE-2023-23506
macos ventura
permissions validation
user-sensitive data
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
AI Score
4.5
Confidence
High
EPSS
0.001
Percentile
26.8%
A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.2. An app may be able to access user-sensitive data.
Affected configurations
Node
applemacosRange<13.2
References
Related
cvelist
cvelist
CVE-2023-23506
2023-02-27 00:00:00
cve
cve
CVE-2023-23506
2023-02-27 20:15:13
prion
prion
Input validation
2023-02-27 20:15:00
nessus
nessus
macOS 13.x < 13.2 Multiple Vulnerabilities (HT213605)
2023-01-24 00:00:00
openvas
openvas
Apple Mac OS X Security Update (HT213603)
2023-01-25 00:00:00
Apple Mac OS X Security Update (HT213605)
2023-01-25 00:00:00
apple
apple
About the security content of macOS Ventura 13.2
2023-01-23 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
AI Score
4.5
Confidence
High
EPSS
0.001
Percentile
26.8%
Related for NVD:CVE-2023-23506