CVE-2023-23538

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. An app may be able to modify protected parts of the file system.
References
Link Resource
https://support.apple.com/en-us/HT213670 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213677 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213670 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213677 Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

29 Jan 2025, 16:15

Type Values Removed Values Added
CWE CWE-863

21 Nov 2024, 07:46

Type Values Removed Values Added
References () https://support.apple.com/en-us/HT213670 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT213670 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT213677 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT213677 - Release Notes, Vendor Advisory

27 Jul 2023, 04:15

Type Values Removed Values Added
Summary A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. An app may be able to modify protected parts of the file system A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. An app may be able to modify protected parts of the file system.

11 May 2023, 17:16

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
First Time Apple macos
Apple
CPE cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
References (MISC) https://support.apple.com/en-us/HT213670 - (MISC) https://support.apple.com/en-us/HT213670 - Release Notes, Vendor Advisory
References (MISC) https://support.apple.com/en-us/HT213677 - (MISC) https://support.apple.com/en-us/HT213677 - Release Notes, Vendor Advisory

08 May 2023, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-05-08 20:15

Updated : 2025-01-29 16:15


NVD link : CVE-2023-23538

Mitre link : CVE-2023-23538

CVE.ORG link : CVE-2023-23538


JSON object : View

Products Affected

apple

  • macos
CWE
NVD-CWE-noinfo CWE-863

Incorrect Authorization