CVE-2023-40405

LOW

macOS - Unprotected Sensitive Location Information Exposure in Log Files

Title source: llm

Description

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.1. An app may be able to read sensitive location information.

References (3)

Core 3

Core References

Mailing List, Third Party Advisory

http://seclists.org/fulldisclosure/2023/Oct/24

Release Notes, Vendor Advisory

https://support.apple.com/en-us/HT213984

Release Notes, Vendor Advisory

https://support.apple.com/kb/HT213984

Scores

CVSS v3 3.3

EPSS 0.0029

EPSS Percentile 20.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-532

Status published

Products (1)

apple/macos 14.0

Published Oct 25, 2023

Tracked Since Feb 18, 2026