CVE-2023-40435

Summary

This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 15. An app may be able to access App Store credentials.

Affected Software

Weaknesses

• An app may be able to access App Store credentials

ADP Enrichment

CVE Program Container

Additional References

• https://support.apple.com/en-us/HT213939
• http://seclists.org/fulldisclosure/2023/Oct/7
• https://support.apple.com/kb/HT213939

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://support.apple.com/en-us/HT213939
• http://seclists.org/fulldisclosure/2023/Oct/7

• ←Previous
• Next→