CVE-2022-48683

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13. An app may be able to break out of its sandbox.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://support.apple.com/en-us/HT213488	Vendor Advisory
https://support.apple.com/en-us/HT213488	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

21 Nov 2024, 07:33

Type	Values Removed	Values Added
References	~~() https://support.apple.com/en-us/HT213488 - Vendor Advisory~~	() https://support.apple.com/en-us/HT213488 - Vendor Advisory

01 Aug 2024, 13:43

Type	Values Removed	Values Added
CWE		CWE-284

12 Jun 2024, 18:05

Type	Values Removed	Values Added
CWE		NVD-CWE-noinfo
CPE		cpe:2.3:o:apple:macos::::::::
References	~~() https://support.apple.com/en-us/HT213488 -~~	() https://support.apple.com/en-us/HT213488 - Vendor Advisory
First Time		Apple Apple macos
Summary		(es) Se solucionó un problema de acceso con restricciones adicionales de la zona de pruebas. Este problema se solucionó en macOS Ventura 13. Es posible que una aplicación pueda salir de su zona de pruebas.
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.8

10 Jun 2024, 20:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-06-10 20:15

Updated : 2024-11-21 07:33

NVD link : CVE-2022-48683

Mitre link : CVE-2022-48683

CVE.ORG link : CVE-2022-48683

JSON object : View

Products Affected

apple

macos

CWE

NVD-CWE-noinfo CWE-284

Improper Access Control

{"id": "CVE-2022-48683", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.8}]}, "published": "2024-06-10T20:15:12.677", "references": [{"url": "https://support.apple.com/en-us/HT213488", "tags": ["Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/HT213488", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13. An app may be able to break out of its sandbox."}, {"lang": "es", "value": "Se solucion\u00f3 un problema de acceso con restricciones adicionales de la zona de pruebas. Este problema se solucion\u00f3 en macOS Ventura 13. Es posible que una aplicaci\u00f3n pueda salir de su zona de pruebas."}], "lastModified": "2024-11-21T07:33:45.850", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "71E032AD-F827-4944-9699-BB1E6D4233FC", "versionEndExcluding": "13.0"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}