CVE-2019-8656
Medium
Description
This was addressed with additional checks by Gatekeeper on files mounted through a network share. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. Extracting a zip file containing a symbolic link to an endpoint in an NFS mount that is attacker controlled may bypass Gatekeeper.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Apple Mac Os X
PublishedOct 27, 2020
First seenOct 27, 2020
How to fix
Update
- apple mac_os_x10.14.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple mac_os_x | v < 10.14.6 | 10.14.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.