CVE-2023-40405

Published Oct 25, 2023

Last updated a year ago

Overview

Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.1. An app may be able to read sensitive location information.
Source: product-security@apple.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 3.3
Impact score: 1.4
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Severity: LOW

Weaknesses

nvd@nist.gov: CWE-532

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:apple:macos:14.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9FE27DF1-3AF9-4BE4-8541-565FE5BC16A2"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References