CVE-2023-40425

Summary

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14, macOS Monterey 12.7.1. An app with root privileges may be able to access private information.

Affected Software

Weaknesses

• A privacy issue was addressed with improved private data redaction for log entries.

ADP Enrichment

CVE Program Container

Additional References

• https://support.apple.com/en-us/HT213983
• https://support.apple.com/kb/HT213983
• http://seclists.org/fulldisclosure/2023/Oct/21

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://support.apple.com/en-us/120950
• https://support.apple.com/en-us/109055

• ←Previous
• Next→