CVEvulnerability
CVE-2024-44128
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-09-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-841
Description
This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An Automator Quick Action workflow may be able to bypass Gatekeeper.
Affected configurations
• apple macos (< 13.7)
• apple macos (>= 14.0 < 14.7)
Related
Weakness · CWE (1)
- CWE-841 Improper Enforcement of Behavioral Workflow weakness
References
- https://support.apple.com/en-us/121234 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121238 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121247 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Sep/33 seclists.org
- http://seclists.org/fulldisclosure/2024/Sep/40 seclists.org
- http://seclists.org/fulldisclosure/2024/Sep/41 seclists.org