First published: Thu Oct 24 2013(Updated: )
Apple Mac OS X before 10.9 does not preserve a certain administrative system-preferences setting across software updates, which allows context-dependent attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended security configuration after the completion of an update.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iOS and macOS | <=10.8.5 | |
Apple iOS and macOS | =10.8.0 | |
Apple iOS and macOS | =10.8.1 | |
Apple iOS and macOS | =10.8.2 | |
Apple iOS and macOS | =10.8.3 | |
Apple iOS and macOS | =10.8.4 | |
Apple iOS and macOS | =10.8.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-5189 is considered a moderate severity vulnerability that affects certain versions of Apple Mac OS X.
To fix CVE-2013-5189, upgrade your Apple Mac OS X to version 10.9 or later.
CVE-2013-5189 affects Apple Mac OS X versions before 10.9, specifically 10.8.5 and earlier.
CVE-2013-5189 allows context-dependent attackers to bypass intended access restrictions due to the failure to preserve administrative settings.
Yes, security updates addressing CVE-2013-5189 are available through Apple for later versions of Mac OS X.