CVE-2024-54471

Published Dec 12, 2024

Last updated 15 days ago

Overview

AI description

Generated using AI and has not been reviewed by Intruder. May contain errors.

CVE-2024-54471 is a vulnerability in macOS that could allow a malicious application to leak a user's credentials. It exploits inter-process communication (IPC) mechanisms within macOS, specifically the Mach kernel's messaging system. The vulnerability lies in the lack of sender verification in Mach Interface Generator (MIG) servers, potentially allowing unauthorized tasks to call routines and access sensitive information. The vulnerability was exploited through the NetAuthAgent daemon, which handles credentials for file servers. An attacker could send a message to NetAuthAgent to obtain credentials for any server. The issue has been addressed with additional entitlement checks and was fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, and macOS Ventura 13.7.1.

Description: This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A malicious application may be able to leak a user's credentials.
Source: product-security@apple.com
NVD status: Modified

Risk scores

CVSS 3.1

Type: Primary
Base score: 5.5
Impact score: 3.6
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity: MEDIUM

Weaknesses

nvd@nist.gov: CWE-522
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-522

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FA438ABE-99D4-49D3-A90A-959B8FDD4012",
            "versionEndExcluding": "13.7.1"
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "901D36FD-C5D9-428D-BE13-662AC380C9AE",
            "versionEndExcluding": "14.7.1",
            "versionStartIncluding": "14.0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]