CVE-2024-54513

EPSS 0.03%
Veröffentlicht 12.12.2024 02:15:31
Zuletzt bearbeitet 13.12.2024 18:09:28
Quelle product-security@apple.com
Teams Watchlist Login
Unerledigt Login

A permissions issue was addressed with additional restrictions. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2. An app may be able to access sensitive user data.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ iPadOS Version < 18.2

Apple ≫ iPhone OS Version < 18.2

Apple ≫ macOS Version < 15.2

Apple ≫ tvOS Version < 18.2

Apple ≫ visionOS Version < 2.2

Apple ≫ watchOS Version < 11.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.03%	0.075

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0	5.7	2.1	3.6	CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-281 Improper Preservation of Permissions

The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

https://support.apple.com/en-us/121839

Vendor Advisory

https://support.apple.com/en-us/121837

Vendor Advisory

https://support.apple.com/en-us/121843

Vendor Advisory

https://support.apple.com/en-us/121844

Vendor Advisory

https://support.apple.com/en-us/121845

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-54513

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-54513

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-54513

EUVD