PT-2023-8475

CVE-2023-42831

·

Published

2023-07-24

·

Updated

2024-01-17

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions macOS versions prior to 11.7.9 iOS versions prior to 15.7.8 iPadOS versions prior to 15.7.8 macOS Monterey versions prior to 12.6.8 macOS Ventura versions prior to 13.5
Description The issue is related to insufficient access control in the Security component of the macOS, iOS, and iPadOS operating systems. This could allow an attacker to gain unauthorized access to user fingerprints. An app may be able to fingerprint the user.
Recommendations For macOS versions prior to 11.7.9, update to macOS Big Sur 11.7.9 or later. For iOS versions prior to 15.7.8, update to iOS 15.7.8 or later. For iPadOS versions prior to 15.7.8, update to iPadOS 15.7.8 or later. For macOS Monterey versions prior to 12.6.8, update to macOS Monterey 12.6.8 or later. For macOS Ventura versions prior to 13.5, update to macOS Ventura 13.5 or later.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾