This issue was addressed with improved checks. This issue is fixed in macOS Mojave 10.14.4. A local user may be able to execute arbitrary shell commands.
References
Link | Resource |
---|---|
https://support.apple.com/HT209600 | Vendor Advisory |
Configurations
Information
Published : 2019-12-18 10:15
Updated : 2019-12-22 07:55
NVD link : CVE-2019-8513
Mitre link : CVE-2019-8513
JSON object : View
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Products Affected
apple
- mac_os_x