The issue was addressed with improved permissions logic. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. An app may be able to modify protected parts of the file system.
History

Wed, 18 Dec 2024 19:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos

Thu, 12 Dec 2024 16:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-863
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 11 Dec 2024 23:00:00 +0000

Type Values Removed Values Added
Description The issue was addressed with improved permissions logic. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. An app may be able to modify protected parts of the file system.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published: 2024-12-11T22:58:23.672Z

Updated: 2024-12-12T15:49:14.687Z

Reserved: 2024-12-03T22:50:35.498Z

Link: CVE-2024-54495

cve-icon Vulnrichment

Updated: 2024-12-12T15:49:01.146Z

cve-icon NVD

Status : Analyzed

Published: 2024-12-12T02:15:30.600

Modified: 2024-12-18T18:40:21.133

Link: CVE-2024-54495

cve-icon Redhat

No data.