CVE-2023-42829

Summary

The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to access SSH passphrases.

Affected Software

Weaknesses

• An app may be able to access SSH passphrases

ADP Enrichment

CVE Program Container

Additional References

• https://support.apple.com/en-us/HT213843
• https://support.apple.com/en-us/HT213845
• https://support.apple.com/en-us/HT213844

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://support.apple.com/en-us/HT213843
• https://support.apple.com/en-us/HT213845
• https://support.apple.com/en-us/HT213844

• ←Previous
• Next→