PT-2015-2270

CVE-2015-5849

·

تاريخ النشر

2015-10-09

·

تاريخ التحديث

2016-12-09

الوصف من

CVSS 2.0
6.8
متوسطة
المقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11
Description The issue is related to the filtering implementation in AppleEvents, which mishandles attempts to send events to a different user. This can be exploited by attackers to bypass intended access restrictions, potentially allowing them to access protected information. The exploitation can be done by leveraging a screen-sharing connection.
Recommendations For Apple OS X versions prior to 10.11, consider disabling the screen-sharing feature as a temporary workaround to minimize the risk of exploitation. Restrict access to sensitive information and functions until a fix is available.
قابلية الاستغلال
إصلاح
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾