ID:9946 - Exploit for Permissions, Privileges, and Access Controls in macOS - CVE-2023-42860

 
Main Vulnerability Database Exploits ID:9946 - Exploit for Permissions, Privileges, and Access Controls in macOS - CVE-2023-42860

ID:9946 - Exploit for Permissions, Privileges, and Access Controls in macOS - CVE-2023-42860

Published: June 7, 2024


Vulnerability identifier: #VU86592
Vulnerability risk: Low
CVE-ID: CVE-2023-42860
CWE-ID: CWE-264
Exploitation vector: Local access
Vulnerable software:
macOS

Link to public exploit:


Vulnerability description

The vulnerability allows a local application to modify protected parts of the file system.

The vulnerability exists due to PackageKit does not properly impose security restrictions. A local application can modify protected parts of the file system.


Remediation

Install updates from vendor's website.