CVE-2020-9846 — Sensitive Information Exposure in Apple Macos

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
5.3MEDIUMNVD
EPSS
0.4%
top 41.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple MacosApple Macos Monterey
Timeline
PublishedFeb 27

Description

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to access local users' Apple IDs.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages3 packages

▶Appleapple/macos_monterey12.0.1
▶CVEListV5apple/macosunspecified — 12.0
▶NVDapple/macos< 12.0.1

🔴Vulnerability Details

1
GHSA
GHSA-j82c-6hc3-3qc4: A logic issue was addressed with improved state management↗2023-02-27
▶

📋Vendor Advisories

1
Apple
CVE-2020-9846: macOS Monterey 12.0.1↗2021-10-25
▶