This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sonoma 14.5, macOS Ventura 13.6.7, macOS Monterey 12.7.5. An app may be able to modify protected parts of the file system.
References
Link | Resource |
---|---|
https://support.apple.com/en-us/HT214105 | Vendor Advisory |
https://support.apple.com/en-us/HT214106 | Vendor Advisory |
https://support.apple.com/en-us/HT214107 | Vendor Advisory |
https://support.apple.com/kb/HT214105 | Vendor Advisory |
https://support.apple.com/kb/HT214106 | Vendor Advisory |
https://support.apple.com/kb/HT214107 | Vendor Advisory |
https://support.apple.com/en-us/HT214105 | Vendor Advisory |
https://support.apple.com/en-us/HT214106 | Vendor Advisory |
https://support.apple.com/en-us/HT214107 | Vendor Advisory |
https://support.apple.com/kb/HT214105 | Vendor Advisory |
https://support.apple.com/kb/HT214106 | Vendor Advisory |
https://support.apple.com/kb/HT214107 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 09:05
Type | Values Removed | Values Added |
---|---|---|
References | () https://support.apple.com/en-us/HT214105 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT214106 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT214107 - Vendor Advisory | |
References | () https://support.apple.com/kb/HT214105 - Vendor Advisory | |
References | () https://support.apple.com/kb/HT214106 - Vendor Advisory | |
References | () https://support.apple.com/kb/HT214107 - Vendor Advisory |
03 Jul 2024, 15:44
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-59 | |
First Time |
Apple macos
Apple |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.3 |
CPE | cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* | |
References | () https://support.apple.com/en-us/HT214105 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT214106 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT214107 - Vendor Advisory | |
References | () https://support.apple.com/kb/HT214105 - Vendor Advisory | |
References | () https://support.apple.com/kb/HT214106 - Vendor Advisory | |
References | () https://support.apple.com/kb/HT214107 - Vendor Advisory |
11 Jun 2024, 13:54
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
11 Jun 2024, 08:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
10 Jun 2024, 21:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-06-10 21:15
Updated : 2024-11-21 09:05
NVD link : CVE-2024-27885
Mitre link : CVE-2024-27885
CVE.ORG link : CVE-2024-27885
JSON object : View
Products Affected
apple
- macos
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')