First published: Thu Mar 29 2018(Updated: )
ATS. A validation issue existed in the handling of symlinks. This issue was addressed through improved validation of symlinks.
Credit: Haik Aftandilian Mozilla product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Mac OS X | <10.13.4 | |
Apple macOS High Sierra | <10.13.4 | 10.13.4 |
Apple Sierra | ||
Apple El Capitan |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2018-4112 is a vulnerability that exists in certain Apple products, specifically macOS before 10.13.4.
CVE-2018-4112 allows attackers to obtain sensitive information by leveraging symlink mishandling in the "ATS" component of macOS.
CVE-2018-4112 has a severity rating of 5.5, which is considered medium severity.
To fix CVE-2018-4112, update your macOS to version 10.13.4 or later.
You can find more information about CVE-2018-4112 on the following references: [http://www.securityfocus.com/bid/103582](http://www.securityfocus.com/bid/103582), [http://www.securitytracker.com/id/1040608](http://www.securitytracker.com/id/1040608), [https://support.apple.com/HT208692](https://support.apple.com/HT208692).