2 lines
5.4 KiB
JSON
2 lines
5.4 KiB
JSON
{"affected":[{"affectedData":[{"product":"macOS","vendor":"Apple","versions":[{"lessThan":"10.13","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"product-security@apple.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"B0B9799C-6891-4D51-9E17-92D1407740F9","versionEndExcluding":"10.13.5","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"DF1A141D-7F31-4175-A5CD-1EB52BE6D8A1","versionEndExcluding":"10.11.6","versionStartIncluding":"10.11","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"D01E4F9E-15B1-4470-8FAF-DB5DCD69CA5C","versionEndExcluding":"10.12.6","versionStartIncluding":"10.12","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.11.6:-:*:*:*:*:*:*","matchCriteriaId":"4B7FC88F-6216-480F-A27D-9A2D2D8F3034","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-001:*:*:*:*:*:*","matchCriteriaId":"C47360D3-4390-4F31-BA82-7A4F38408E68","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-002:*:*:*:*:*:*","matchCriteriaId":"DEB1158A-9D65-463A-A8AF-D946E95EB2D5","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-003:*:*:*:*:*:*","matchCriteriaId":"28B4E7A2-3022-4B23-A068-FFE58C3A449B","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-001:*:*:*:*:*:*","matchCriteriaId":"7EE0F7C4-53B7-4554-8F4D-AAB417A1569F","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-002:*:*:*:*:*:*","matchCriteriaId":"C03A4DED-974B-4FCE-92F7-83DA939E0847","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-003:*:*:*:*:*:*","matchCriteriaId":"47EF9186-8EBD-441B-B2DD-FB18C072EEBC","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-004:*:*:*:*:*:*","matchCriteriaId":"79665061-B72E-4AE9-97FF-C570A2C6BA23","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-005:*:*:*:*:*:*","matchCriteriaId":"66D090A0-4037-4F0A-8059-6BC2D6462562","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2018-001:*:*:*:*:*:*","matchCriteriaId":"EF698571-54B5-42F7-BD70-F55DB3FF8F63","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2018-002:*:*:*:*:*:*","matchCriteriaId":"AF4CB0F7-4A7D-48C2-B9DC-8FDB4E28DDE4","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.12.6:-:*:*:*:*:*:*","matchCriteriaId":"6536473A-2ECF-4806-AC02-2386552BEAB1","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.12.6:security_update_2017-001:*:*:*:*:*:*","matchCriteriaId":"B8EFC700-879E-4C5C-8A21-064114E9D7B2","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.12.6:security_update_2017-002:*:*:*:*:*:*","matchCriteriaId":"42D07F77-71D6-4D97-AF3E-157DDFF4C6B5","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.12.6:security_update_2018-001:*:*:*:*:*:*","matchCriteriaId":"FDC975B8-5808-4D2B-A9FF-445A7D7A33FB","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.12.6:security_update_2018-002:*:*:*:*:*:*","matchCriteriaId":"46E55B34-EF29-48F9-8248-CA2CB4960C2B","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A validation issue was addressed with improved logic. This issue is fixed in macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, Security Update 2018-003 El Capitan. An attacker with physical access to a device may be able to elevate privileges."},{"lang":"es","value":"Se abordó un problema de comprobación con una lógica mejorada. Este problema es corregido en macOS High Sierra versión 10.13.5, Security Update 2018-003 Sierra, Security Update 2018-003 El Capitan. Un atacante con acceso físico a un dispositivo puede ser capaz de elevar privilegios"}],"id":"CVE-2018-4478","lastModified":"2026-06-17T01:59:01.977","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":7.2,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":3.9,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"PHYSICAL","availabilityImpact":"HIGH","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-12-23T20:15:08.620","references":[{"source":"product-security@apple.com","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/HT208849"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/HT208849"}],"sourceIdentifier":"product-security@apple.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-269"}],"source":"nvd@nist.gov","type":"Primary"}]}
|