Paper/Archive/CVE-2021-30856

CVE-2021-30856

Apple macOS — This issue was addressed by adding a new Remote Login option for opting into Full Disk Access for Secure Shell sessions.

EPSS 0.9%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 60.8.608 × 2012.2 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

This issue was addressed by adding a new Remote Login option for opting into Full Disk Access for Secure Shell sessions. This issue is fixed in macOS Big Sur 11.3. A malicious unsandboxed app on a system with Remote Login enabled may bypass Privacy preferences.

Affected

ProductAffectedFixed inSource

macOSunspecified – < 11.311.3CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

refsupport.apple.com/en-us/HT212325