Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "FinderKit" component. It allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging unexpected permission changes during an iCloud Sharing...

CVE-2017-2429

CVE-2017-2429 (Apple FinderKit) affects macOS versions prior to 10.12.4. The issue allows remote attackers to bypass access restrictions in opportunistic scenarios by exploiting unexpected permission changes during an iCloud Sharing Send Link action. Root cause is a permission handling flaw in Fi...