medium5.5
CVE-2021-1797
The issue was addressed with improved permissions logic.
Impact
The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local user may be able to read arbitrary files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Ipad Os | before 14.4 |
| Apple | Iphone Os | before 14.4 |
| Apple | Mac Os X | before 10.14.6 from 10.15 before 10.15.7 Versions 10.14.6, 10.15.7 |
| Apple | Macos | from 11.0.1 before 11.2 |
| Apple | Tvos | before 14.4 |
| Apple | Watchos | before 7.3 |
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2021/Apr/51
- https://support.apple.com/en-us/HT212146
- https://support.apple.com/en-us/HT212147
- https://support.apple.com/en-us/HT212148
- https://support.apple.com/en-us/HT212149
- https://support.apple.com/kb/HT212326
- https://support.apple.com/kb/HT212327
- http://seclists.org/fulldisclosure/2021/Apr/51
- https://support.apple.com/en-us/HT212146
- https://support.apple.com/en-us/HT212147
- https://support.apple.com/en-us/HT212148
- https://support.apple.com/en-us/HT212149
- https://support.apple.com/kb/HT212326
- https://support.apple.com/kb/HT212327