CVE Vulnerabilities

CVE-2021-1836

Improper Privilege Management

Published: Sep 08, 2021 | Modified: Oct 25, 2022
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 14.5 and iPadOS 14.5, tvOS 14.5. A local user may be able to create or modify privileged files.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Ipados Apple * 14.5 (excluding)
Iphone_os Apple * 14.5 (excluding)
Tvos Apple * 14.5 (excluding)

Potential Mitigations

References