CVE-2024-54466

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An encrypted volume may be accessed by a different user without prompting for the password.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

18 Dec 2024, 17:59

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.3
CPE cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
First Time Apple macos
Apple
CWE CWE-862
References () https://support.apple.com/en-us/121839 - () https://support.apple.com/en-us/121839 - Vendor Advisory
References () https://support.apple.com/en-us/121840 - () https://support.apple.com/en-us/121840 - Vendor Advisory
References () https://support.apple.com/en-us/121842 - () https://support.apple.com/en-us/121842 - Vendor Advisory

12 Dec 2024, 02:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-12-12 02:15

Updated : 2024-12-18 17:59


NVD link : CVE-2024-54466

Mitre link : CVE-2024-54466


JSON object : View

Products Affected

apple

  • macos
CWE
CWE-862

Missing Authorization