CVE-2020-29633 - An authentication issue was addressed with improved state management

Back Back to CVE browser

HIGH

An authentication issue was addressed with improved state management

Published Apr 2, 2021

8.8

HIGH

CVSS 3.1

EPSS 1.05%

Description

An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. An attacker in a privileged network position may be able to bypass authentication policy.

Affected products

Vendor Apple Product macOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <11.1
- Version
  unspecified
  Status
  affected
  Constraints
  <11.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Apple

macOS

n/a

Version	Status	Constraints
unspecified	affected	<11.1
unspecified	affected	<11.2

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-21994
Advisory
https://support.apple.com/en-us/HT212011
x_refsource_MISCVendor Advisory
https://support.apple.com/en-us/HT212147
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-21994		Advisory
https://support.apple.com/en-us/HT212011		x_refsource_MISCVendor Advisory
https://support.apple.com/en-us/HT212147		x_refsource_MISCVendor Advisory