CVE-2019-8702

Published: Dec 23, 2021Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

This issue was addressed with a new entitlement. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra, iOS 12.4, tvOS 12.4. A local user may be able to read a persistent account identifier.

Affected (23)

Products: Apple: Iphone Os, Mac Os X, Tvos

3 products

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Before 12.4
Apple Mac Os X	Before 10.14.6
Apple Mac Os X	From 10.12 to 10.12.6
Apple Mac Os X	From 10.13 to 10.13.6
Apple Mac Os X	Version 10.12.6
Apple Mac Os X	Version 10.12.6 security_update_2017-001
Apple Mac Os X	Version 10.12.6 security_update_2017-002
Apple Mac Os X	Version 10.12.6 security_update_2018-001
Apple Mac Os X	Version 10.12.6 security_update_2018-002
Apple Mac Os X	Version 10.12.6 security_update_2018-003
Apple Mac Os X	Version 10.12.6 security_update_2018-004
Apple Mac Os X	Version 10.12.6 security_update_2018-005
Apple Mac Os X	Version 10.12.6 security_update_2018-006
Apple Mac Os X	Version 10.12.6 security_update_2019-001
Apple Mac Os X	Version 10.12.6 security_update_2019-002
Apple Mac Os X	Version 10.12.6 security_update_2019-003
Apple Mac Os X	Version 10.13.6
Apple Mac Os X	Version 10.13.6 security_update_2018-002
Apple Mac Os X	Version 10.13.6 security_update_2018-003
Apple Mac Os X	Version 10.13.6 security_update_2019-001
Apple Mac Os X	Version 10.13.6 security_update_2019-002
Apple Mac Os X	Version 10.13.6 security_update_2019-003
Apple Tvos	Before 12.4