CVE-2024-44131
Improper Link Resolution Before File Access ('Link Following') (CWE-59)
Summary
An application may be able to access sensitive user data due to improper validation of symlinks. This vulnerability affects iOS, iPadOS, and macOS operating systems.
Impact
If exploited, this vulnerability could allow a malicious application to gain unauthorized access to sensitive user data, potentially compromising user privacy and confidentiality. The attack requires local access and low privileges, but does not require user interaction. While the confidentiality impact is high, there is no impact on integrity or availability of the system.
Exploitation
There is no evidence that a public proof-of-concept exists. There is no evidence of proof of exploitation at the moment.
Patch
A patch is available. This issue is fixed in iOS 18 and iPadOS 18, and macOS Sequoia 15.
Mitigation
To mitigate this vulnerability, it is recommended to update affected systems to the patched versions: 1. For iOS and iPadOS devices, update to version 18.0 or later. 2. For macOS systems, update to macOS Sequoia (version 15.0) or later. 3. Until patches can be applied, limit the installation of untrusted applications and monitor for any suspicious application behavior. 4. Consider implementing additional access controls to sensitive user data directories.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Timeline
Feedly found the first article mentioning CVE-2024-44131. See article
NVD published the first details for CVE-2024-44131
Feedly estimated the CVSS score as MEDIUM
EPSS Score was set to: 0.04% (Percentile: 9.6%)
Detection for the vulnerability has been added to Qualys (610582)
A CVSS base score of 5.5 has been assigned.
EPSS Score was set to: 0.04% (Percentile: 9.7%)
Detection for the vulnerability has been added to Qualys (380763)
A CVSS base score of 5.5 has been assigned.