CVE-2020-9817
published 2020-06-09CVE-2020-9817: A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in macOS Catalina 10.15.5. A malicious…
PriorityP337high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
1.06%
61.2th percentile
A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to gain root privileges.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | >= 10.13 < 10.13.6 | 10.13.6 |
| apple | mac_os_x | >= 10.14 < 10.14.6 | 10.14.6 |
| apple | mac_os_x | >= 10.15 < 10.15.5 | 10.15.5 |
| apple | macos | >= unspecified < macOS Catalina 10.15.5 | macOS Catalina 10.15.5 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-g587-fq79-crm3: A permissions issue existed
ghsa_unreviewed·2022-05-24
CVE-2020-9817 [HIGH] CWE-276 GHSA-g587-fq79-crm3: A permissions issue existed
A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to gain root privileges.
Cisco
MacOS Local Privilege Escalation Exploitable through Cisco AnyConnect Secure Mobility Client
vendor_cisco·2021-05-05·CVSS 7.8
CVE-2020-9817 [HIGH] MacOS Local Privilege Escalation Exploitable through Cisco AnyConnect Secure Mobility Client
MacOS Local Privilege Escalation Exploitable through Cisco AnyConnect Secure Mobility Client
On May 26, 2020, Apple released a security update for MacOS Catalina, Mojave, and High Sierra. Part of this update addressed a local privilege escalation vulnerability (CVE-2020-9817).
Cisco has determined that Cisco AnyConnect Secure Mobility Client releases 4.10.00093 and earlier could be used to exploit this vulnerability.
This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-mac-priv-esc-VqST2nrT
No detection rules found.
No public exploits indexed.
2020-06-09
Published