« Back to list

CVE-2019-8634

Status: ModifiedHigh (8.8)—

An authentication issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.5. A user may be unexpectedly logged in to another user’s account.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Apple — MAC OS X

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2019-8634",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "product-security@apple.com",
      "affectedData": [
        {
          "vendor": "Apple",
          "product": "macOS",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "macOS Mojave 10.14.5",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-12-18T18:15:30.647",
  "references": [
    {
      "url": "https://support.apple.com/HT210119",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "product-security@apple.com"
    },
    {
      "url": "https://support.apple.com/HT210119",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authentication issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.5. A user may be unexpectedly logged in to another user’s account."
    },
    {
      "lang": "es",
      "value": "Un problema de autenticación fue abordado con una gestión de estado mejorada. Este problema es corregido en macOS Mojave versión 10.14.5. Un usuario puede iniciar sesión inesperadamente en la cuenta de otro usuario."
    }
  ],
  "lastModified": "2026-06-17T02:42:17.677",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5D3003F5-F330-48A9-A4E3-FC97BEEE5FB8",
              "versionEndExcluding": "10.12.6"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D6E2DF4C-D103-4762-8CF1-6EDCE088FB1A",
              "versionEndExcluding": "10.14.5"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "760AE295-2E39-4DA3-A384-01A5D4A131AD",
              "versionEndExcluding": "10.13.6",
              "versionStartIncluding": "10.13"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.12.6:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6536473A-2ECF-4806-AC02-2386552BEAB1"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.12.6:security_update_2017-001:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B8EFC700-879E-4C5C-8A21-064114E9D7B2"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.12.6:security_update_2018-001:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FDC975B8-5808-4D2B-A9FF-445A7D7A33FB"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.12.6:security_update_2018-002:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "46E55B34-EF29-48F9-8248-CA2CB4960C2B"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.12.6:security_update_2018-003:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "21364751-F80E-46BA-AF76-C8B1689F426D"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.12.6:security_update_2018-004:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "60EF4C45-05E2-498C-8245-45871BBF8A3E"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.12.6:security_update_2018-005:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9E029E9E-E01B-4995-B7FA-286A0C667A54"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.12.6:security_update_2018-006:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8F352467-BBDC-4A1A-8BF0-0DA2F762DBFA"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.12.6:security_update_2019-001:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4353B3DF-2371-4A6F-9FF8-2CC3EF7DC4F6"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.12.6:security_update_2019-002:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A0334DC1-4D8C-448C-84B3-310499118B44"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "297D2D0C-EA9D-4B2C-9357-D88DB6C7143A"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2018-002:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0D845143-1B4D-478B-B83E-8F1664CBCAC3"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2018-003:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "23C6DF6A-9A30-4F9E-BD9C-C19D8551C6DA"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-001:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "754A2DF4-8724-4448-A2AB-AC5442029CB7"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-002:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D392C777-1949-4920-B459-D083228E4688"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "product-security@apple.com"
}