CCE-50247-6| Platform: cpe:/o:apple:mac_os_14 | Date: (C)2023-11-28 (M)2023-11-28 |
Screen sharing is a feature that lets computers on the same network connect to one another and to display the same screen. While sharing screens, the user can control the actions on that computer. The macOS benchmark states that disabling screen sharing mitigates the risk of remote connections being made without the user of the console knowing that they are sharing the computer.
Fix
defaults write /System/Volumes/Data/private/var/db/com.apple.xpc.launchd/disabled.plist com.apple.screensharing 1
Parameter:
[yes/no]
Technical Mechanism:
defaults write /System/Volumes/Data/private/var/db/com.apple.xpc.launchd/disabled.plist com.apple.screensharing 1
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 8.0 | Attack Vector: ADJACENT_NETWORK |
| Exploit Score: 2.1 | Attack Complexity: LOW |
| Impact Score: 5.9 | Privileges Required: LOW |
| Severity: HIGH | User Interaction: NONE |
| Vector: AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | Scope: UNCHANGED |
| | Confidentiality: HIGH |
| | Integrity: HIGH |
| | Availability: HIGH |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:94812 |
