MEDIUM
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Installer" component. It does not properly restrict an app's entitlements for accessing the FileVault unlock key.
Source: MITRE
Published: 2018-04-03
Updated: 2018-05-04
Type: CWE-254
Base Score: 5
Vector: (AV:N/AC:L/Au:N/C:P/I:N/A:N)
Impact Score: 2.9
Exploitability Score: 10
Severity: MEDIUM
Base Score: 7.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Impact Score: 3.6
Exploitability Score: 3.9
Severity: HIGH