CVE-2023-40425

MEDIUM

4.4

Beschreibung

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14, macOS Monterey 12.7.1. An app with root privileges may be able to access private information.

CVE Details

CVSS v3.1 Bewertung4.4

SchweregradMEDIUM

CVSS VektorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AngriffsvektorLOCAL

KomplexitatLOW

Erforderliche PrivilegienHIGH

BenutzerinteraktionNONE

Veroffentlicht10/25/2023

Zuletzt geandert6/12/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

apple:macos

Schwachen (CWE)

CWE-532CWE-532

Referenzen

https://support.apple.com/en-us/109055(product-security@apple.com)

https://support.apple.com/en-us/120950(product-security@apple.com)

http://seclists.org/fulldisclosure/2023/Oct/21(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT213983(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/kb/HT213983(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.