Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q9rq-fh6c-82mw

Опубликовано: 17 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Anaconda3 macOS installers before 2024.06-1 contain a local privilege escalation vulnerability when installed outside the user's home directory. During installation, world-writable files are created and executed with root privileges. This allows a local low-privileged user to inject arbitrary commands, leading to code execution as the root user.

Anaconda3 macOS installers before 2024.06-1 contain a local privilege escalation vulnerability when installed outside the user's home directory. During installation, world-writable files are created and executed with root privileges. This allows a local low-privileged user to inject arbitrary commands, leading to code execution as the root user.

EPSS

Процентиль: 6%
0.00025
Низкий

7.8 High

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 7.8
nvd
около 2 месяцев назад

Anaconda3 macOS installers before 2024.06-1 contain a local privilege escalation vulnerability when installed outside the user's home directory. During installation, world-writable files are created and executed with root privileges. This allows a local low-privileged user to inject arbitrary commands, leading to code execution as the root user.

EPSS

Процентиль: 6%
0.00025
Низкий

7.8 High

CVSS3

Дефекты

CWE-77