PT-2019-13079 · Objective Development · Little Snitch

Publicado 2019-08-23 · Atualizado 2021-09-08 · CVE-2019-13013

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Little Snitch versions 4.3.0 through 4.3.2

Description The issue concerns a local privilege escalation in the privileged helper tool of Little Snitch. This tool implements an XPC interface that is accessible to any process, allowing for directory listings and copying files as root.

Recommendations For versions 4.3.0 through 4.3.2, consider disabling the XPC interface in the privileged helper tool until a patch is available to prevent potential exploitation.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

CWE-264

Identificadores relacionados

CVE-2019-13013

Produtos afetados

Little Snitch

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-13013 · Aviso do Fabricante
• https://obdev.at/cve/2019-13013-OSv2mEFD3z.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-13013 · Nota de Segurança