CVE-2020-9934 PoC — 多款Apple产品CoreFoundation组件安全漏洞

Source

https://github.com/mattshockl/CVE-2020-9934

Associated Vulnerability

Title: 多款Apple产品CoreFoundation组件安全漏洞 (CVE-2020-9934)
Description:An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6. A local user may be able to view sensitive user information.

Description

CVE-2020–9934 POC

Readme

# CVE-2020-9934

This Proof of Concept is a simple Swift program that will give itself and Terminal every kTCCService entitlement (pulled from tccd) and then do four things:
* Create a file named "<<<\<BYPASS>>>>" in the TCC-protected directory
* Read the data from said file from within the TCC-protected directory
* List all files in the TCC-directory (including "<<<\<BYPASS>>>>")
* Remove the file from the TCC-protected directory

Usage:
`./bypasstc <tcc-protected directory>`

See the [full writeup on Medium](https://medium.com/@mattshockl/cve-2020-9934-bypassing-the-os-x-transparency-consent-and-control-tcc-framework-for-4e14806f1de8)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →