2023-09-27 16:00:29 +00:00
{
"id" : "CVE-2023-32421" ,
"sourceIdentifier" : "product-security@apple.com" ,
"published" : "2023-09-27T15:18:52.413" ,
2024-12-08 03:06:42 +00:00
"lastModified" : "2024-11-21T08:03:19.320" ,
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-09-27 16:00:29 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. An app may be able to observe unprotected user data."
2023-10-03 08:00:28 +00:00
} ,
{
"lang" : "es" ,
"value" : "Se solucion\u00f3 un problema de privacidad mejorando el manejo de archivos temporales. Este problema se solucion\u00f3 en macOS Sonoma 14. Es posible que una aplicaci\u00f3n pueda observar datos de usuario desprotegidos."
2023-09-27 16:00:29 +00:00
}
] ,
2023-09-27 20:00:29 +00:00
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 5.5 ,
"baseSeverity" : "MEDIUM" ,
2023-09-27 20:00:29 +00:00
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "REQUIRED" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "NONE" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "NONE"
2023-09-27 20:00:29 +00:00
} ,
"exploitabilityScore" : 1.8 ,
"impactScore" : 3.6
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "NVD-CWE-noinfo"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "14.0" ,
"matchCriteriaId" : "7A5DD3D5-FB4F-4313-B873-DCED87FC4605"
}
]
}
]
}
] ,
2023-09-27 16:00:29 +00:00
"references" : [
2023-10-03 08:00:28 +00:00
{
"url" : "http://seclists.org/fulldisclosure/2023/Oct/3" ,
2023-10-05 16:00:30 +00:00
"source" : "product-security@apple.com" ,
"tags" : [
"Mailing List" ,
"Third Party Advisory"
]
2023-10-03 08:00:28 +00:00
} ,
2023-09-27 16:00:29 +00:00
{
"url" : "https://support.apple.com/en-us/HT213940" ,
2023-09-27 20:00:29 +00:00
"source" : "product-security@apple.com" ,
"tags" : [
"Release Notes" ,
"Vendor Advisory"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "http://seclists.org/fulldisclosure/2023/Oct/3" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Mailing List" ,
"Third Party Advisory"
]
} ,
{
"url" : "https://support.apple.com/en-us/HT213940" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Release Notes" ,
"Vendor Advisory"
]
2023-09-27 16:00:29 +00:00
}
]
}