NetSight
medium5.5

CVE-2022-22582

A validation issue existed in the handling of symlinks.

Impact

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5, macOS Monterey 12.3. A local user may be able to write arbitrary files.

Affected products

VendorProductAffected versions
AppleMac Os X
Version 10.15.7
AppleMacos
from 11.0 before 11.6.5
from 12.0.0 before 12.3

Weakness classification

References