CVE-2021-1797

Severity

55%

Complexity

18%

Confidentiality

60%

The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local user may be able to read arbitrary files.

CVSS 3.1 Base Score 5.5. CVSS Attack Vector: local. CVSS Attack Complexity: low. CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

CVSS 2.0 Base Score 2.1. CVSS Attack Vector: local. CVSS Attack Complexity: low. CVSS Vector: (AV:L/AC:L/Au:N/C:P/I:N/A:N).

Overview

First reported 3 years ago

2021-04-02 19:15:00

Last updated 3 years ago

2021-05-04 19:35:00

Affected Software

Apple Mac OS X

Apple Mac OS X 10.14.6

10.14.6

References

https://support.apple.com/en-us/HT212146

https://support.apple.com/en-us/HT212147

https://support.apple.com/en-us/HT212148

https://support.apple.com/en-us/HT212149

https://support.apple.com/en-us/HT212146

Vendor Advisory

https://support.apple.com/en-us/HT212147

Vendor Advisory

https://support.apple.com/en-us/HT212148

Vendor Advisory

https://support.apple.com/en-us/HT212149

Vendor Advisory

https://support.apple.com/kb/HT212326

https://support.apple.com/kb/HT212327

https://support.apple.com/kb/HT212326

Vendor Advisory

https://support.apple.com/kb/HT212327

Vendor Advisory

20210427 APPLE-SA-2021-04-26-3 Security Update 2021-002 Catalina

20210427 APPLE-SA-2021-04-26-3 Security Update 2021-002 Catalina

Mailing List, Third Party Advisory

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.