CVE-2023-40425
MEDIUM | Platform: macOS | Changelog
CVE Details
Description
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14, macOS Monterey 12.7.1. An app with root privileges may be able to access private information.
CVSS 3.1 Score
| Metric | Value |
|---|---|
| Base Score | 4.4 (MEDIUM) |
| Vector | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
Weakness
References
- Apple Security Advisory
- NVD Entry
- https://support.apple.com/en-us/109055
- https://support.apple.com/en-us/120950
- http://seclists.org/fulldisclosure/2023/Oct/21 (Mailing List, Third Party Advisory)
- https://support.apple.com/en-us/HT213983 (Release Notes, Vendor Advisory)