CVE-2021-3187 Privilege escalation in n/a
An authenticated unprivileged user can elevate privileges to root by executing a malicious script during installation on specific macOS versions.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-3187?
CVE-2021-3187 is a high-severity vulnerability in n/a, published on 11 Dec 2023. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated, unprivileged user can elevate privileges by running a malicious script (that executes as root from a temporary directory) during install time. (This applies to macOS before 10.15.5, or Security Update 2020-003 on Mojave and High Sierra, Later versions of macOS are not vulnerable.)
Weakness: CWE-276
Which versions are affected by CVE-2021-3187?
It affects 1 product.
Products include Beyondtrust Privilege Management for Mac.
How do I fix CVE-2021-3187?
No fix has been published for CVE-2021-3187 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-3187 being exploited?
There is no known exploitation of CVE-2021-3187 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-wwc4-3prx-5752.