CVE Vulnerabilities

CVE-2023-40425

Insertion of Sensitive Information into Log File

Published: Oct 25, 2023 | Modified: Jun 12, 2025
CVSS 3.x
4.4
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14, macOS Monterey 12.7.1. An app with root privileges may be able to access private information.

Weakness

The product writes sensitive information to a log file.

Affected Software

Name Vendor Start Version End Version
Macos Apple 12.0.0 (including) 12.7.1 (excluding)

Potential Mitigations

References