The Security component in Apple OS X before 10.10.2 does not properly process cached information about app certificates, which allows attackers to bypass the Gatekeeper protection mechanism by leveraging access to a revoked Developer ID certificate for signing a crafted app.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: apple
Published: 2015-01-30T11:00:00
Updated: 2024-08-06T13:26:02.693Z
Reserved: 2014-11-14T00:00:00
Link: CVE-2014-8838
Vulnrichment
No data.
NVD
Status : Modified
Published: 2015-01-30T11:59:47.627
Modified: 2017-09-08T01:29:29.620
Link: CVE-2014-8838
Redhat
No data.