« Volver al listado

CVE-2014-1347

Estado: ModificadaMedia (4.4)—

Apple iTunes anterior a 11.2.1 en OS X configura permisos de lectura universal para /Users y /Users/Shared durante reinicios, lo que permite a usuarios locales modificar archivos, y como consecuencia obtener acceso a cuentas de usuarios arbitrarios, a través de operaciones estándar de sistemas de archivos.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Apple — Itunes

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-1347",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.4,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "product-security@apple.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-05-18T11:12:54.313",
  "references": [
    {
      "url": "http://support.apple.com/kb/HT6251",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "product-security@apple.com"
    },
    {
      "url": "http://support.apple.com/kb/HT6251",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Apple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared during reboots, which allows local users to modify files, and consequently obtain access to arbitrary user accounts, via standard filesystem operations."
    },
    {
      "lang": "es",
      "value": "Apple iTunes anterior a 11.2.1 en OS X configura permisos de lectura universal para /Users y /Users/Shared durante reinicios, lo que permite a usuarios locales modificar archivos, y como consecuencia obtener acceso a cuentas de usuarios arbitrarios, a través de operaciones estándar de sistemas de archivos."
    }
  ],
  "lastModified": "2026-06-17T00:04:44.450",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6722DFCA-3E6E-49FE-81AE-146243731138",
              "versionEndIncluding": "11.2"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3979F15D-34E1-49F6-BCCE-21F4F680D9D8"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D0181AF-C382-4500-A7AC-220DCD619F96"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6B04367A-1C86-4CF6-BCB7-3FA4D920E452"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4F346750-0E04-46BC-94DD-524A2893D8FD"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "48E955F0-51D4-4B91-AE05-5653800C3AC9"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6925AABD-3132-4144-8209-E5C47ED8459F"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B3EF55F1-D02F-4D20-9D35-02E83D3C0F6D"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7834154-4F1D-4ADD-8512-7C7CF76F8A34"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3E9F1B66-20BF-4942-B266-05975298CA87"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "17110B7B-4E90-4906-B21D-BBB14811B1F8"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "23102AB3-E7C9-45F2-9B4A-480F23A18A0E"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E0230093-CCB7-4F75-B9A2-9B073C31648D"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "product-security@apple.com"
}