CVE-2017-13837

HIGH

macOS < 10.13 - Unprotected FileVault Unlock Key Exposure via Installer Entitlements

Title source: llm
STIX 2.1

Description

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Installer" component. It does not properly restrict an app's entitlements for accessing the FileVault unlock key.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT208144

Scores

CVSS v3 7.5
EPSS 0.0095
EPSS Percentile 57.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

Status published
Products (1)
apple/mac_os_x 10.13.0
Published Apr 03, 2018
Tracked Since Feb 18, 2026