What is the severity of CVE-2013-1031?

CVE-2013-1031 is considered a medium severity vulnerability that allows local attackers to bypass access restrictions.

How do I fix CVE-2013-1031?

The best way to fix CVE-2013-1031 is to update your Mac OS X to version 10.8.5 or later.

What software versions are affected by CVE-2013-1031?

CVE-2013-1031 affects Mac OS X versions 10.8.0 through 10.8.4.

Who is at risk from CVE-2013-1031?

Physically proximate attackers who have access to an unattended workstation are at risk from CVE-2013-1031.

What kind of access does CVE-2013-1031 allow an attacker?

CVE-2013-1031 allows an attacker to bypass intended access restrictions on a locked workstation.

Vulnerability/
CVE-2013-1031

low

3.3

CWE

264

16/9/2013

19/9/2013

CVE-2013-1031

First published: Mon Sep 16 2013(Updated: )

Power Management in Apple Mac OS X before 10.8.5 does not properly perform locking upon occurrences of a power assertion, which allows physically proximate attackers to bypass intended access restrictions by visiting an unattended workstation on which a locking failure had prevented the startup of the screen saver.

Credit: product-security@apple.com

Affected Software	Affected Version	How to fix
Apple iOS and macOS	<=10.8.4
Apple iOS and macOS	=10.8.0
Apple iOS and macOS	=10.8.1
Apple iOS and macOS	=10.8.2
Apple iOS and macOS	=10.8.3

Remedy

http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html

Remedy

http://support.apple.com/kb/HT5880

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2013-1031?
CVE-2013-1031 is considered a medium severity vulnerability that allows local attackers to bypass access restrictions.
How do I fix CVE-2013-1031?
The best way to fix CVE-2013-1031 is to update your Mac OS X to version 10.8.5 or later.
What software versions are affected by CVE-2013-1031?
CVE-2013-1031 affects Mac OS X versions 10.8.0 through 10.8.4.
Who is at risk from CVE-2013-1031?
Physically proximate attackers who have access to an unattended workstation are at risk from CVE-2013-1031.
What kind of access does CVE-2013-1031 allow an attacker?
CVE-2013-1031 allows an attacker to bypass intended access restrictions on a locked workstation.

agent/references
agent/type
agent/last-modified-date
agent/first-publish-date
agent/remedy
agent/description
agent/weakness
agent/severity
agent/author
agent/softwarecombine
agent/tags
agent/event
collector/nvd-index
agent/software-canonical-lookup-request
vendor/apple
canonical/apple ios and macos
version/apple ios and macos/10.8.4
version/apple ios and macos/10.8.0
version/apple ios and macos/10.8.1
version/apple ios and macos/10.8.2
version/apple ios and macos/10.8.3

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.