CVEvulnerability
CVE-2024-54519
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-01-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-532
Description
The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. An app may be able to read sensitive location information.
Affected configurations
• apple macos (< 14.7.2)
• apple macos (>= 15.0 < 15.2)
Related
Weakness · CWE (1)
- CWE-532 Insertion of Sensitive Information into Log File weakness
References
- https://support.apple.com/en-us/121839 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121840 Release Notes, Vendor Advisory