CVE-2024-23295

Summary

A permissions issue was addressed to help ensure Personas are always protected. This issue is fixed in visionOS 1.1. An unauthenticated user may be able to use an unprotected Persona.

Affected Software

Weaknesses

• An unauthenticated user may be able to use an unprotected Persona

ADP Enrichment

CVE Program Container

Additional References

• https://support.apple.com/en-us/HT214087
• http://seclists.org/fulldisclosure/2024/Mar/26
• https://support.apple.com/kb/HT214087

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://support.apple.com/en-us/120883

• ←Previous
• Next→