This issue was addressed with a new entitlement. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra, iOS 12.4, tvOS 12.4. A local user may be able to read a persistent account identifier.
References
Link | Resource |
---|---|
https://support.apple.com/en-us/HT210351 | Vendor Advisory |
https://support.apple.com/en-us/HT210348 | Vendor Advisory |
https://support.apple.com/en-us/HT210346 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2021-12-23 12:15
Updated : 2022-01-05 12:47
NVD link : CVE-2019-8702
Mitre link : CVE-2019-8702
JSON object : View
CWE
CWE-668
Exposure of Resource to Wrong Sphere
Products Affected
apple
- mac_os_x
- iphone_os
- tvos