CVEvulnerability
CVE-2023-23538
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-05-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-863
Description
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. An app may be able to modify protected parts of the file system.
Affected configurations
• apple macos (< 12.6.4)
• apple macos (>= 13.0 < 13.3)
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://support.apple.com/en-us/HT213670 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213677 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213670 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213677 Release Notes, Vendor Advisory