CVE-2013-5189

Apple Mac OS X before 10.9 does not preserve a certain administrative system-preferences setting across software updates, which allows context-dependent attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended security configuration after the completion of an update.

Score
CVSS 2.0 5.8 Medium
Status
Modified - product-security@apple.com
Published
2013-10-24
Last modified
2024-09-17
Weaknesses
CWE-264

Affected products

References