What is CVE-2017-13837?

CVE-2017-13837 is a high-severity vulnerability in Apple Mac OS X. CVSS score: 7.5/10. Published 2018-04-03.

How severe is CVE-2017-13837?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Apple Mac OS X

CVE-2017-13837

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Installer" component. It does not properly restrict an app's entitlements for accessing the FileVault unlock key.

EPSS: 0.009 (57.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Apple Mac_os_x — versions 10.13.0
N/a — versions n/a

References

product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-13837?: CVE-2017-13837 is a high-severity vulnerability in Apple Mac OS X. CVSS score: 7.5/10. Published 2018-04-03.
How severe is CVE-2017-13837?: High severity. CVSS v3 base score is 7.5 out of 10.