CVE-2023-42931

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Monterey 12.7.2. A process may gain admin privileges without proper authentication.
References
Link Resource
https://support.apple.com/en-us/HT214036 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT214037 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT214038 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT214036 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT214037 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT214038 Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

21 Nov 2024, 08:23

Type Values Removed Values Added
References () https://support.apple.com/en-us/HT214036 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT214036 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT214037 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT214037 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT214038 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT214038 - Release Notes, Vendor Advisory

03 Jul 2024, 01:41

Type Values Removed Values Added
CWE CWE-280

08 Apr 2024, 22:47

Type Values Removed Values Added
First Time Apple macos
Apple
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8
References () https://support.apple.com/en-us/HT214036 - () https://support.apple.com/en-us/HT214036 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT214037 - () https://support.apple.com/en-us/HT214037 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT214038 - () https://support.apple.com/en-us/HT214038 - Release Notes, Vendor Advisory
CPE cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Summary
  • (es) El problema se solucionó con controles mejorados. Este problema se solucionó en macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Monterey 12.7.2. Un proceso puede obtener privilegios de administrador sin la autenticación adecuada.
CWE NVD-CWE-noinfo

28 Mar 2024, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-03-28 16:15

Updated : 2024-11-21 08:23


NVD link : CVE-2023-42931

Mitre link : CVE-2023-42931

CVE.ORG link : CVE-2023-42931


JSON object : View

Products Affected

apple

  • macos
CWE
NVD-CWE-noinfo CWE-280

Improper Handling of Insufficient Permissions or Privileges