cve-2024-23229
Vulnerability from cvelistv5
Published
2024-05-13 23:00
Modified
2024-09-03 18:14
Severity
Summary
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.5, macOS Ventura 13.6.5, macOS Sonoma 14.4. A malicious application may be able to access Find My data.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-01T22:59:32.170Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://support.apple.com/en-us/HT214105"
},
{
"tags": [
"x_transferred"
],
"url": "https://support.apple.com/en-us/HT214085"
},
{
"tags": [
"x_transferred"
],
"url": "https://support.apple.com/en-us/HT214084"
},
{
"tags": [
"x_transferred"
],
"url": "https://support.apple.com/kb/HT214084"
},
{
"tags": [
"x_transferred"
],
"url": "https://support.apple.com/kb/HT214085"
},
{
"tags": [
"x_transferred"
],
"url": "http://seclists.org/fulldisclosure/2024/May/14"
},
{
"tags": [
"x_transferred"
],
"url": "https://support.apple.com/kb/HT214105"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-23229",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-08-08T18:52:04.390478Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-09-03T18:14:20.312Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "12.7",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "13.6",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "14.4",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.5, macOS Ventura 13.6.5, macOS Sonoma 14.4. A malicious application may be able to access Find My data."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "A malicious application may be able to access Find My data",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-05-13T23:00:52.724Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/HT214105"
},
{
"url": "https://support.apple.com/en-us/HT214085"
},
{
"url": "https://support.apple.com/en-us/HT214084"
},
{
"url": "https://support.apple.com/kb/HT214084"
},
{
"url": "https://support.apple.com/kb/HT214085"
},
{
"url": "http://seclists.org/fulldisclosure/2024/May/14"
},
{
"url": "https://support.apple.com/kb/HT214105"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2024-23229",
"datePublished": "2024-05-13T23:00:52.724Z",
"dateReserved": "2024-01-12T22:22:21.479Z",
"dateUpdated": "2024-09-03T18:14:20.312Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2024-23229\",\"sourceIdentifier\":\"product-security@apple.com\",\"published\":\"2024-05-14T14:58:46.647\",\"lastModified\":\"2024-06-10T19:15:53.010\",\"vulnStatus\":\"Awaiting Analysis\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.5, macOS Ventura 13.6.5, macOS Sonoma 14.4. A malicious application may be able to access Find My data.\"},{\"lang\":\"es\",\"value\":\"Este problema se solucion\u00f3 mejorando la redacci\u00f3n de informaci\u00f3n confidencial. Este problema se solucion\u00f3 en macOS Monterey 12.7.5, macOS Ventura 13.6.5, macOS Sonoma 14.4. Es posible que una aplicaci\u00f3n maliciosa pueda acceder a Buscar mis datos.\"}],\"metrics\":{},\"references\":[{\"url\":\"http://seclists.org/fulldisclosure/2024/May/14\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/en-us/HT214084\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/en-us/HT214085\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/en-us/HT214105\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/kb/HT214084\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/kb/HT214085\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/kb/HT214105\",\"source\":\"product-security@apple.com\"}]}}"
}
}
Loading...