CVE-2021-1739 - 漏洞详情

CVE-2021-1739 (CNNVD-202104-1988)

MEDIUM

中文标题:

Apple watchOS 路径遍历漏洞

英文标题:

A parsing issue in the handling of directory paths was addressed with improved path validation. This...

CVSS分数: 5.5

发布时间: 2021-09-08 14:54:36

漏洞类型: 路径遍历

状态: PUBLISHED

数据质量分数: 0.30

数据版本: v3

漏洞描述

中文描述:

Apple watchOS是美国苹果（Apple）公司的一套智能手表操作系统。 watchOS 存在路径遍历漏洞，该漏洞源于目录路径验证不足。以下产品及版本受到影响：watchOS: 7.0 18R382, 7.0.1 18R395, 7.0.2 18R402, 7.0.3 18R410, 7.1 18R590, 7.2 18S564, 7.3 18S801, 7.3.1 18S811, 7.3.2 18S821, 7.3.3 18S830 。

英文描述:

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A local user may be able to modify protected parts of the file system.

CWE类型:

CWE-22

受影响产品

厂商	产品	版本	版本范围	平台	CPE
Apple	iOS and iPadOS	-	< 14.5	-	`cpe:2.3:a:apple:ios_and_ipados::::::::`
Apple	tvOS	-	< 14.5	-	`cpe:2.3:a:apple:tvos::::::::`
Apple	watchOS	-	< 7.4	-	`cpe:2.3:a:apple:watchos::::::::`
Apple	macOS	-	< 11.3	-	`cpe:2.3:a:apple:macos::::::::`
apple	ipados	*	-	-	`cpe:2.3:o:apple:ipados::::::::`
apple	iphone_os	*	-	-	`cpe:2.3:o:apple:iphone_os::::::::`
apple	mac_os_x	*	-	-	`cpe:2.3:o:apple:mac_os_x::::::::`
apple	mac_os_x	10.14.6	-	-	`cpe:2.3:o:apple:mac_os_x:10.14.6:-::::::`
apple	mac_os_x	10.15	-	-	`cpe:2.3:o:apple:mac_os_x:10.15:::::::*`
apple	mac_os_x	10.15.6	-	-	`cpe:2.3:o:apple:mac_os_x:10.15.6:-::::::`
apple	mac_os_x	10.15.7	-	-	`cpe:2.3:o:apple:mac_os_x:10.15.7:-::::::`
apple	macos	*	-	-	`cpe:2.3:o:apple:macos::::::::`
apple	tvos	*	-	-	`cpe:2.3:o:apple:tvos::::::::`
apple	watchos	*	-	-	`cpe:2.3:o:apple:watchos::::::::`

解决方案

中文解决方案:

（暂无数据）

英文解决方案:

（暂无数据）