Description (CNA)
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to read arbitrary files.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apple / iOS and iPadOS | affected unspecified before 17 |
| Apple / macOS | affected unspecified before 12.7 |
| Apple / macOS | affected unspecified before 13.6 |
| Apple / tvOS | affected unspecified before 17 |
| Apple / macOS | affected unspecified before 14 |
| Apple / watchOS | affected unspecified before 10 |
CWE
No CWE identifiers supplied.
References
- https://support.apple.com/en-us/HT213938
- https://support.apple.com/en-us/HT213932
- https://support.apple.com/en-us/HT213931
- https://support.apple.com/en-us/HT213936
- https://support.apple.com/en-us/HT213940
- https://support.apple.com/en-us/HT213937
- http://seclists.org/fulldisclosure/2023/Oct/5
- http://seclists.org/fulldisclosure/2023/Oct/10
- http://seclists.org/fulldisclosure/2023/Oct/6
- http://seclists.org/fulldisclosure/2023/Oct/8
- http://seclists.org/fulldisclosure/2023/Oct/9
- http://seclists.org/fulldisclosure/2023/Oct/3
ADP enrichment
No English description supplied.
- https://support.apple.com/en-us/HT213938
- https://support.apple.com/en-us/HT213932
- https://support.apple.com/en-us/HT213931
- https://support.apple.com/en-us/HT213936
- https://support.apple.com/en-us/HT213940
- https://support.apple.com/en-us/HT213937
- http://seclists.org/fulldisclosure/2023/Oct/5
- http://seclists.org/fulldisclosure/2023/Oct/10
- http://seclists.org/fulldisclosure/2023/Oct/6
- http://seclists.org/fulldisclosure/2023/Oct/8
- http://seclists.org/fulldisclosure/2023/Oct/9
- http://seclists.org/fulldisclosure/2023/Oct/3
- https://support.apple.com/kb/HT213940
- https://support.apple.com/kb/HT213932
- https://support.apple.com/kb/HT213931
- https://support.apple.com/kb/HT213938
- https://support.apple.com/kb/HT213937
No English description supplied.
No references supplied.