CVE-2021-30947

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-30947
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, watchOS 8.3. An application may be able to access a user's files.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
https://support.apple.com/en-us/HT212975
https://support.apple.com/en-us/HT212976
https://support.apple.com/en-us/HT212978
https://support.apple.com/en-us/HT212979
https://support.apple.com/en-us/HT212980
https://support.apple.com/en-us/HT212975
https://support.apple.com/en-us/HT212976
https://support.apple.com/en-us/HT212978
https://support.apple.com/en-us/HT212979
https://support.apple.com/en-us/HT212980
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
History

21 Nov 2024, 06:05

Type Values Removed Values Added
References () https://support.apple.com/en-us/HT212975 - () https://support.apple.com/en-us/HT212975 -
References () https://support.apple.com/en-us/HT212976 - () https://support.apple.com/en-us/HT212976 -
References () https://support.apple.com/en-us/HT212978 - () https://support.apple.com/en-us/HT212978 -
References () https://support.apple.com/en-us/HT212979 - () https://support.apple.com/en-us/HT212979 -
References () https://support.apple.com/en-us/HT212980 - () https://support.apple.com/en-us/HT212980 -

11 Aug 2023, 12:57

Type Values Removed Values Added
CWE CWE-668 NVD-CWE-Other

29 Dec 2021, 18:43

Type Values Removed Values Added
References (MISC) https://support.apple.com/en-us/HT212979 - (MISC) https://support.apple.com/en-us/HT212979 - Vendor Advisory
References (MISC) https://support.apple.com/en-us/HT212978 - (MISC) https://support.apple.com/en-us/HT212978 - Vendor Advisory
References (MISC) https://support.apple.com/en-us/HT212976 - (MISC) https://support.apple.com/en-us/HT212976 - Vendor Advisory
References (MISC) https://support.apple.com/en-us/HT212980 - (MISC) https://support.apple.com/en-us/HT212980 - Vendor Advisory
References (MISC) https://support.apple.com/en-us/HT212975 - (MISC) https://support.apple.com/en-us/HT212975 - Vendor Advisory
CWE CWE-668
CVSS v2 : unknown
v3 : unknown 		v2 : 4.3
v3 : 5.5
CPE cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

23 Dec 2021, 20:15

Type Values Removed Values Added
References
  • (MISC) https://support.apple.com/en-us/HT212980 -
  • (MISC) https://support.apple.com/en-us/HT212979 -
  • (MISC) https://support.apple.com/en-us/HT212978 -
  • (MISC) https://support.apple.com/en-us/HT212975 -
  • (MISC) https://support.apple.com/en-us/HT212976 -
Summary ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by the CVE program. Notes: none. An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, watchOS 8.3. An application may be able to access a user's files.

24 Aug 2021, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2021-08-24 19:15

Updated : 2024-11-21 06:05

NVD link : CVE-2021-30947

Mitre link : CVE-2021-30947

CVE.ORG link : CVE-2021-30947

JSON object : View

Products Affected

apple

  • iphone_os
  • watchos
  • tvos
  • macos
  • ipados
CWE
NVD-CWE-Other