Описание
Automox Agent for macOS before version 39 was vulnerable to a time-of-check/time-of-use (TOCTOU) race-condition attack during the agent install process.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 39 (исключая)
Одновременно
cpe:2.3:a:automox:automox:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
EPSS
Процентиль: 25%
0.00085
Низкий
7 High
CVSS3
6.9 Medium
CVSS2
Дефекты
CWE-367
Связанные уязвимости
CVSS3: 7
github
больше 3 лет назад
The Automox Agent installation package before 37 on macOS allows an unprivileged user to obtain root access because of incorrect access control on a file used within the PostInstall script.
EPSS
Процентиль: 25%
0.00085
Низкий
7 High
CVSS3
6.9 Medium
CVSS2
Дефекты
CWE-367