A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Monterey 12.7.1. An app with root privileges may be able to access private information.
References
| Link | Resource |
|---|---|
| http://seclists.org/fulldisclosure/2023/Oct/21 | Mailing List Third Party Advisory |
| https://support.apple.com/en-us/HT213983 | Release Notes Vendor Advisory |
| https://support.apple.com/kb/HT213983 | Release Notes Vendor Advisory |
Configurations
History
02 Nov 2023, 13:59
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-532 | |
| First Time |
Apple macos
Apple |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.4 |
| CPE | cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* | |
| References | (MISC) https://support.apple.com/kb/HT213983 - Release Notes, Vendor Advisory | |
| References | (MISC) http://seclists.org/fulldisclosure/2023/Oct/21 - Mailing List, Third Party Advisory | |
| References | (MISC) https://support.apple.com/en-us/HT213983 - Release Notes, Vendor Advisory |
25 Oct 2023, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
25 Oct 2023, 20:31
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
25 Oct 2023, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-25 19:15
Updated : 2024-02-28 20:33
NVD link : CVE-2023-40425
Mitre link : CVE-2023-40425
CVE.ORG link : CVE-2023-40425
JSON object : View
Products Affected
apple
- macos
CWE
CWE-532
Insertion of Sensitive Information into Log File