Privacy Issue in Open Directory Records in macOS High Sierra by Apple
CVE-2018-4217

7.5HIGH

Key Information:

Vendor
Apple
Status
Mac Os X
Vendor
CVE Published:
11 January 2019

Summary

In earlier versions of macOS High Sierra prior to 10.13.5, a significant privacy issue was identified concerning the management of Open Directory records. This vulnerability could potentially allow unauthorized access to sensitive information, raising concerns about data protection and privacy. Apple addressed this issue with improved indexing, enhancing the security of Open Directory handling and ensuring better privacy for users.

References

https://support.apple.com/HT208849
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.