CCE-50254-2| Platform: cpe:/o:apple:mac_os_14 | Date: (C)2023-11-28 (M)2023-11-28 |
A custom message that can be displayed at the lock screen and FileVault login screen. Often used to warn people of permitted system actions and possible legal consequences of misuse. The benchmark (macOS) states that displaying an access warning may reduce an attackers tendency to access the system, and it may aid in the prosecution of an attacker.
Fix:
defaults write /Library/Preferences/com.apple.loginwindow.plist LoginwindowText -string "$LoginBanner"
Parameter:
[banner_text]
Technical Mechanism:
defaults write /Library/Preferences/com.apple.loginwindow.plist LoginwindowText -string "$LoginBanner"
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 5.1 | Attack Vector: LOCAL |
| Exploit Score: 2.5 | Attack Complexity: LOW |
| Impact Score: 2.5 | Privileges Required: NONE |
| Severity: MEDIUM | User Interaction: NONE |
| Vector: AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L | Scope: UNCHANGED |
| | Confidentiality: LOW |
| | Integrity: NONE |
| | Availability: LOW |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:94819 |
