CVE Vulnerabilities

CVE-2015-7016

Published: Oct 23, 2015 | Modified: Oct 27, 2015
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.6 HIGH
AV:N/AC:H/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

The MCX Application Restrictions component in Apple OS X before 10.11.1, when Managed Configuration is enabled, mishandles provisioning profiles, which allows attackers to bypass intended entitlement restrictions and gain privileges via a crafted developer-signed app.

Affected Software

Name Vendor Start Version End Version
Mac_os_x Apple * 10.11.0

References