2 lines
4.3 KiB
JSON
2 lines
4.3 KiB
JSON
{"affected":[{"affectedData":[{"product":"iOS and iPadOS","vendor":"Apple","versions":[{"lessThan":"14.5","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"tvOS","vendor":"Apple","versions":[{"lessThan":"14.5","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"watchOS","vendor":"Apple","versions":[{"lessThan":"7.4","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"macOS","vendor":"Apple","versions":[{"lessThan":"11.3","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"product-security@apple.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*","matchCriteriaId":"3EAAE2C1-EF21-4567-99F1-335D1EF955D1","versionEndExcluding":"14.5","vulnerable":true},{"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"C1E12568-6F17-458F-8216-3D6DBC8F6DEE","versionEndExcluding":"14.5","vulnerable":true},{"criteria":"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*","matchCriteriaId":"4E699CCC-31F5-458E-A59C-79B3AF143747","versionEndExcluding":"11.3","versionStartIncluding":"11.0","vulnerable":true},{"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","matchCriteriaId":"D5B77841-F161-47AB-8043-3E0346E3AA25","versionEndExcluding":"14.5","vulnerable":true},{"criteria":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","matchCriteriaId":"CFFFE00C-0AA6-4F60-ABF4-E68877BFD8F8","versionEndExcluding":"7.4","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A local user may be able to modify protected parts of the file system."},{"lang":"es","value":"Se abordó un problema de análisis en el manejo de las rutas de los directorios con una comprobación de rutas mejorada. Este problema se corrigió en macOS Big Sur versión 11.3, iOS versión 14.5 e iPadOS versión 14.5, watchOS versión 7.4, tvOS versión 14.5. Un usuario local puede ser capaz de modificar partes protegidas del sistema de archivos"}],"id":"CVE-2021-1815","lastModified":"2026-06-17T03:32:36.677","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"NONE","baseScore":2.1,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","version":"2.0"},"exploitabilityScore":3.9,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-09-08T15:15:09.837","references":[{"source":"product-security@apple.com","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/HT212317"},{"source":"product-security@apple.com","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/HT212323"},{"source":"product-security@apple.com","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/HT212324"},{"source":"product-security@apple.com","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/HT212325"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/HT212317"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/HT212323"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/HT212324"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/HT212325"}],"sourceIdentifier":"product-security@apple.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-22"}],"source":"nvd@nist.gov","type":"Primary"}]}
|