Lucene search
+L

Apple Mac OS X Security Update (HT214048)

🗓️ 08 Jan 2024 00:00:00Reported by Copyright (C) 2024 Greenbone AGType 
openvas
 openvas
🔗 plugins.openvas.org👁 33 Views

Apple Mac OS X Security Update (HT214048) addressing session rendering vulnerabilit

Related
Refs
Code
ReporterTitlePublishedViews
Family
apple
Apple
About the security content of macOS Sonoma 14.2.1
19 Dec 202300:00
apple
bdu_fstec
BDU FSTEC
The vulnerability of the WindowServer component of the macOS operating system, which allows a hacker to gain unauthorized access to the user’s screen.
25 Feb 202400:00
bdu_fstec
circl
Circl
CVE-2023-42940
20 Dec 202313:53
circl
cnnvd
CNNVD
Apple macOS Sonoma Security Vulnerability
19 Dec 202300:00
cnnvd
cve
CVE
CVE-2023-42940
19 Dec 202321:13
cve
cvelist
Cvelist
CVE-2023-42940
19 Dec 202321:13
cvelist
nessus
Tenable Nessus
macOS 14.x < 14.2.1 (HT214048)
19 Dec 202300:00
nessus
nvd
NVD
CVE-2023-42940
19 Dec 202322:15
nvd
osv
OSV
CVE-2023-42940
19 Dec 202322:15
osv
prion
Prion
Session fixation
19 Dec 202322:15
prion
Rows per page
# SPDX-FileCopyrightText: 2024 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only


if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.832761");
  script_version("2024-02-09T14:47:30+0000");
  script_cve_id("CVE-2023-42940");
  script_tag(name:"cvss_base", value:"6.8");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:S/C:C/I:N/A:N");
  script_tag(name:"last_modification", value:"2024-02-09 14:47:30 +0000 (Fri, 09 Feb 2024)");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2024-01-04 14:56:00 +0000 (Thu, 04 Jan 2024)");
  script_tag(name:"creation_date", value:"2024-01-08 14:54:24 +0530 (Mon, 08 Jan 2024)");
  script_name("Apple Mac OS X Security Update (HT214048)");

  script_tag(name:"summary", value:"Apple Mac OS X is prone to an unspecified
  vulnerability.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present
  on the target host.");

  script_tag(name:"insight", value:"The flaw exists due to a session rendering
  issue in Apple macOS Sonoma.");

  script_tag(name:"impact", value:"Successful exploitation will allow users who
  shares their screen to share the incorrect content unintentionally.");

  script_tag(name:"affected", value:"Apple macOS Sonoma prior to version 14.2.1");

  script_tag(name:"solution", value:"Upgrade to version 14.2.1 for macOS Sonoma.");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"package");
  script_xref(name:"URL", value:"https://support.apple.com/en-us/HT214048");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2024 Greenbone AG");
  script_family("Mac OS X Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/osx_name", "ssh/login/osx_version");
  exit(0);
}

include("version_func.inc");

osName = get_kb_item("ssh/login/osx_name");
if(!osName)
  exit(0);

osVer = get_kb_item("ssh/login/osx_version");
if(!osVer || osVer !~ "^14\." || "Mac OS X" >!< osName) {
  exit(0);
}

if(version_is_less(version:osVer, test_version:"14.2.1")) {
  report = report_fixed_ver(installed_version:osVer, fixed_version:"14.2.1");
  security_message(port:0, data:report);
  exit(0);
}

exit(99);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

09 Feb 2024 00:00Current
5.2Medium risk
Vulners AI Score5.2
CVSS 3.15.7
EPSS0.00707
SSVC
33