Lucene search
HistoryOct 25, 2023 - 7:15 p.m.
CVE-2023-40405
privacy issue
data redaction
log entries
macos sonoma 14.1
sensitive location information
CVSS3
3.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
AI Score
2.8
Confidence
High
EPSS
0.001
Percentile
17.1%
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.1. An app may be able to read sensitive location information.
Affected configurations
Node
applemacosMatch14.0
Related
vulnrichment
vulnrichment
CVE-2023-40405
2023-10-25 18:31:54
cve
cve
CVE-2023-40405
2023-10-25 19:15:09
prion
prion
Information disclosure
2023-10-25 19:15:00
cvelist
cvelist
CVE-2023-40405
2023-10-25 18:31:54
openvas
openvas
Apple Mac OS X Security Update (HT213984)
2023-10-27 00:00:00
apple
apple
About the security content of macOS Sonoma 14.1
2023-10-25 00:00:00
nessus
nessus
macOS 14.x < 14.1 Multiple Vulnerabilities (HT213984)
2024-01-23 00:00:00
CVSS3
3.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
AI Score
2.8
Confidence
High
EPSS
0.001
Percentile
17.1%
Related for NVD:CVE-2023-40405