CVEvulnerability
CVE-2023-42913
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-03-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-922
Description
This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.2. Remote Login sessions may be able to obtain full disk access permissions.
Affected configurations
• apple macos (< 14.2)
Related
Weakness · CWE (1)
- CWE-922 Insecure Storage of Sensitive Information weakness
References
- https://support.apple.com/en-us/HT214036 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214036 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214036 support.apple.com