This issue was addressed with improved checks. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A local user may be able to read arbitrary files as root.
Vector
LOCAL
Complexity
LOW
Authentication
NONE
Confidentiality
COMPLETE
Integrity
NONE
Availability
NONE
Apple Macos * * * * (not an official CPE)
Apple Mac os x 10.15.7 Supplemental update * * (not an official CPE)
Apple Mac os x 10.15.7 Security update 2021-003 * * (not an official CPE)
Apple Mac os x 10.15.7 Security update 2021-002 * * (not an official CPE)
Apple Mac os x 10.15.7 Security update 2021-001 * * (not an official CPE)
Apple Mac os x 10.15.7 Security update 2020-007 * * (not an official CPE)
Apple Mac os x 10.15.7 Security update 2020-005 * * (not an official CPE)
Apple Mac os x 10.15.7 Security update 2020-001 * * (not an official CPE)
Apple Mac os x 10.15.7 Security update 2020 * * (not an official CPE)
Apple Mac os x 10.15.7 - * * (not an official CPE)
Apple Mac os x * * * * (not an official CPE)
Advisory | Patch | Confirmed | Link |
---|---|---|---|
https://support.apple.com/en-us/HT212805 | |||
https://support.apple.com/en-us/HT212804 |