Logic Flaw in macOS Sonoma Enables Unauthorized Access to Removable Volumes
CVE-2023-40430
5.5MEDIUM
Summary
A logic flaw has been identified in macOS Sonoma 14, which potentially allows applications to gain access to removable volumes without obtaining user's explicit consent. This vulnerability raises significant concerns regarding user privacy and data security, as unauthorized access to removable storage can lead to sensitive information being compromised. Apple has addressed this issue with enhanced checks to prevent such unauthorized access, emphasizing the importance of user consent in data usage.
Affected Version(s)
macOS < 14
References
CVSS V3.1
Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved