An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves CFPreferences in the System Preferences component. It allows attackers to bypass intended access restrictions by leveraging incorrect configuration-profile persistence.
Weakness
The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Iphone_os | Apple | * | 11.3 (excluding) |
| Mac_os_x | Apple | * | 10.13.4 (excluding) |
| Tvos | Apple | * | 11.3 (excluding) |
| Watchos | Apple | * | 4.3 (excluding) |
References
- http://www.securitytracker.com/id/1040604
- http://www.securitytracker.com/id/1040608
- https://support.apple.com/HT208692
- https://support.apple.com/HT208693
- https://support.apple.com/HT208696
- https://support.apple.com/HT208698
- http://www.securitytracker.com/id/1040604
- http://www.securitytracker.com/id/1040608
- https://support.apple.com/HT208692
- https://support.apple.com/HT208693
- https://support.apple.com/HT208696
- https://support.apple.com/HT208698