CVE-2013-1031 — Apple MAC OS X vulnerability

CWE-2644 documents3 sources
Severity
3.3LOWNVD
EPSS
0.1%
top 82.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple MAC OS X
Timeline
PublishedSep 16
Latest updateMay 17

Description

Power Management in Apple Mac OS X before 10.8.5 does not properly perform locking upon occurrences of a power assertion, which allows physically proximate attackers to bypass intended access restrictions by visiting an unattended workstation on which a locking failure had prevented the startup of the screen saver.

CVSS vector

AV:L/AC:M/C:P/I:P/A:NExploitability: 3.4 | Impact: 4.9

Affected Packages1 packages

▶NVDapple/mac_os_x10.8.4+4

Patches

Patch: lists.apple.com ↗Patch: support.apple.com ↗Patch: lists.apple.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-v394-3cq8-g794: Power Management in Apple Mac OS X before 10↗2022-05-17
▶

💬Community

2
Bugzilla
CVE-2013-1789 poppler: Multiple null pointer de-references in the Poppler splash backend↗2013-03-01
▶
Bugzilla
CVE-2013-0196 OpenShift Enterprise and Online vulnerable to CSRF attack with REST API↗2013-01-18
▶