CCE-90040-7| Platform: cpe:/o:apple:mac_os_x:10.9 | Date: (C)2015-06-11 (M)2023-07-04 |
Disable iTunes Music Sharing
When iTunes Music Sharing is enabled, the computer starts a network listening service that shares the contents of the user's music collection with other users in the same subnet. Unnecessary network services should always be disabled because they increase the attack surface of the system. Disabling iTunes Music Sharing mitigates this risk.
Parameter:
[enable/disable]
Technical Mechanism:
To check if the iTunes music sharing is disabled, run the following command:
system_profiler SPConfigurationProfileDataType | grep disableSharedMusic
If 'disableSharedMusic' is not set to '1', this is a finding.
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 8.8 | Attack Vector: ADJACENT_NETWORK |
| Exploit Score: 2.8 | Attack Complexity: LOW |
| Impact Score: 5.9 | Privileges Required: NONE |
| Severity: HIGH | User Interaction: NONE |
| Vector: AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | Scope: UNCHANGED |
| | Confidentiality: HIGH |
| | Integrity: HIGH |
| | Availability: HIGH |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:24672 |
