CVE-2020-9856: Medium severity apple macOS Catalina vulnerability

Q: What is CVE-2020-9856?

CVE-2020-9856 is a vulnerability in the CVMS system that allows for unauthorized access.

Q: How does CVE-2020-9856 affect macOS Catalina?

CVE-2020-9856 affects macOS Catalina versions up to and including 10.15.5.

Q: Is Mojave affected by CVE-2020-9856?

Yes, Mojave is also affected by CVE-2020-9856.

Q: What is the severity of CVE-2020-9856?

The severity of CVE-2020-9856 is not specified.

Q: How can I fix CVE-2020-9856?

CVE-2020-9856 has been addressed with improved checks. Update your system to the latest version available from Apple.

Published May 26, 2020

Updated

CVMS. This issue was addressed with improved checks.

Other sources

This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.5. An application may be able to gain elevated privileges.

Credit

@@jinmo123, @@setuid0x0_, @@insu_yun_en(Trend Micro)

Affected Software

30 affected componentsFixes available

apple macOS Catalina<10.15.5

10.15.5

apple Mojave

apple High Sierra

Apple iOS and macOS>=10.13<10.13.6

Apple iOS and macOS>=10.14<10.14.6

Apple iOS and macOS>=10.15<10.15.5

Apple iOS and macOS=10.13.6

Apple iOS and macOS=10.13.6-security_update_2018-002

Apple iOS and macOS=10.13.6-security_update_2018-003

Apple iOS and macOS=10.13.6-security_update_2019-001

Apple iOS and macOS=10.13.6-security_update_2019-002

Apple iOS and macOS=10.13.6-security_update_2019-003

Apple iOS and macOS=10.13.6-security_update_2019-004

Apple iOS and macOS=10.13.6-security_update_2019-005

Apple iOS and macOS=10.13.6-security_update_2019-006

Apple iOS and macOS=10.13.6-security_update_2019-007

Apple iOS and macOS=10.13.6-security_update_2020-001

Apple iOS and macOS=10.13.6-security_update_2020-002

Apple iOS and macOS=10.14.6

Apple iOS and macOS=10.14.6-security_update_2019-001

Apple iOS and macOS=10.14.6-security_update_2019-002

Apple iOS and macOS=10.14.6-security_update_2019-004

Apple iOS and macOS=10.14.6-security_update_2019-005

Apple iOS and macOS=10.14.6-security_update_2019-006

Apple iOS and macOS=10.14.6-security_update_2019-007

Apple iOS and macOS=10.14.6-security_update_2020-001

Apple iOS and macOS=10.14.6-security_update_2020-002

Apple iOS and macOS=10.14.6-security_update_2020-003

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade macOS Catalina to a version that resolves this vulnerability.
Fixed in 10.15.5

Event History

Jun 9, 2020

CVE Published

via MITRE·04:18 PM

Data Sourced

via MITRE·04:18 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

HT211170

Frequently Asked Questions

What is CVE-2020-9856?

CVE-2020-9856 is a vulnerability in the CVMS system that allows for unauthorized access.

How does CVE-2020-9856 affect macOS Catalina?