PT-2022-26179 · Apple · Apple Macos

4Ra1N · Published 2022-11-22 · Updated 2022-11-26 · CVE-2022-41950

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions super-xray versions 0.2-beta

Description A privilege escalation issue was discovered in super-xray, which is the GUI alternative for the vulnerability scanning tool xray. This issue resulted in inaccurate default xray permissions. The problem only affects Linux and Mac OS systems.

Recommendations For super-xray version 0.2-beta, upgrade to super-xray 0.3-beta to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-250

Related Identifiers

CVE-2022-41950

GHSA-2G28-XRW6-FQ5F

Affected Products

Apple Macos

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41950.json · Exploit
• 🔥 https://github.com/4ra1n/super-xray/security/advisories/GHSA-2g28-xrw6-fq5f · Exploit
• https://osv.dev/vulnerability/CVE-2022-41950 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-41950 · Security Note
• https://github.com/4ra1n/super-xray/releases/tag/0.3-beta · Note
• https://t.me/cvenotify/38248 · Telegram Post