« Volver al listado

CVE-2017-13907

Estado: ModificadaMedia (6.8)—

A state management issue was addressed with improved state validation. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan. The screen lock may unexpectedly remain unlocked.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Apple — MAC OS X

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-13907",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.8,
          "attackVector": "PHYSICAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.9
      }
    ]
  },
  "affected": [
    {
      "source": "product-security@apple.com",
      "affectedData": [
        {
          "vendor": "Apple",
          "product": "macOS",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "10.13",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-12-23T20:15:08.303",
  "references": [
    {
      "url": "https://support.apple.com/en-us/HT208221",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "product-security@apple.com"
    },
    {
      "url": "https://support.apple.com/en-us/HT208221",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A state management issue was addressed with improved state validation. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan. The screen lock may unexpectedly remain unlocked."
    },
    {
      "lang": "es",
      "value": "Se abordó un problema de administración de estados con una comprobación de estados mejorada. Este problema es corregido en macOS High Sierra versión 10.13.1, Security Update 2017-001 Sierra y Security Update 2017-004 El Capitan. El bloqueo de pantalla puede permanecer desbloqueado inesperadamente"
    }
  ],
  "lastModified": "2026-06-17T01:05:21.713",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DF1A141D-7F31-4175-A5CD-1EB52BE6D8A1",
              "versionEndExcluding": "10.11.6",
              "versionStartIncluding": "10.11"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C9E4E153-2DFD-4F60-851B-E33E3D96058D",
              "versionEndIncluding": "10.12.5",
              "versionStartIncluding": "10.12"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.11.6:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4B7FC88F-6216-480F-A27D-9A2D2D8F3034"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-001:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C47360D3-4390-4F31-BA82-7A4F38408E68"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-002:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DEB1158A-9D65-463A-A8AF-D946E95EB2D5"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-003:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "28B4E7A2-3022-4B23-A068-FFE58C3A449B"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-001:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7EE0F7C4-53B7-4554-8F4D-AAB417A1569F"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-002:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C03A4DED-974B-4FCE-92F7-83DA939E0847"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-003:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "47EF9186-8EBD-441B-B2DD-FB18C072EEBC"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "product-security@apple.com"
}