A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A person with physical access to a Mac may be able to bypass Login Window.
Published 2021-09-08 15:15:15
Updated 2021-09-16 16:48:52
Source Apple Inc.
View at NVD,   CVE.org
Vulnerability category: BypassGain privilege

Products affected by CVE-2021-30702

  • Apple » Mac Os X
    Versions from including (>=) 10.15 and up to, including, (<=) 10.15.6
    cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
  • Apple » Mac Os X
    Versions from including (>=) 10.14 and up to, including, (<=) 10.14.5
    cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.14.6
    cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.14.6 Update Security Update 2019-001
    cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.14.6 Update Security Update 2019-002
    cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.14.6 Update Security Update 2019-006
    cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.14.6 Update Security Update 2019-007
    cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.14.6 Update Security Update 2020-001
    cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.14.6 Update Security Update 2020-002
    cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.14.6 Update Security Update 2020-003
    cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.14.6 Update Security Update 2020-004
    cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.14.6 Update Security Update 2020-005
    cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.14.6 Update Security Update 2020-006
    cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.14.6 Update Security Update 2020-007
    cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.14.6 Update Supplemental Update
    cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.14.6 Update Supplemental Update 2
    cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.15.7
    cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.15.7 Update Security Update 2020-001
    cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.15.7 Update Supplemental Update
    cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.14.6 Update Security Update 2019-004
    cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.14.6 Update Security Update 2019-005
    cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.15.7 Update Security Update 2020
    cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.15.7 Update Security Update 2020-005
    cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-005:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.15.7 Update Security Update 2020-007
    cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-007:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.14.6 Update Security Update 2021-001
    cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-001:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.14.6 Update Security Update 2021-002
    cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-002:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.15.7 Update Security Update 2021-001
    cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.14.6 Update Security Update 2021-003
    cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-003:*:*:*:*:*:*
  • Apple » Mac Os X » Version: 10.15.7 Update Security Update 2021-002
    cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*
  • Apple » Macos
    Versions from including (>=) 11.0 and before (<) 11.4
    cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Exploit prediction scoring system (EPSS) score for CVE-2021-30702

0.07%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 33 %
Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-30702

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
2.1
LOW AV:L/AC:L/Au:N/C:N/I:P/A:N
3.9
2.9
NIST
4.6
MEDIUM CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
0.9
3.6
NIST

CWE ids for CVE-2021-30702

  • When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
    Assigned by: nvd@nist.gov (Primary)

References for CVE-2021-30702

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!