Lucene search

TalosCVE-2018-4036

HistoryJan 10, 2019 - 3:29 p.m.

CVE-2018-4036

2019-01-1015:29:00

CWE-20

talos

web.nvd.nist.gov

cleanmymac x

privilege escalation

vulnerability

local access

kernel extensions

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

5.4

Confidence

High

EPSS

Percentile

5.1%

JSON

The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with local access could use this vulnerability to modify the running kernel extensions on the system.

Affected configurations

Nvd

Vulners

Node

macpawcleanmymac_xMatch4.04

VendorProductVersionCPE
macpawcleanmymac_x4.04cpe:2.3:a:macpaw:cleanmymac_x:4.04:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
macpaw	cleanmymac_x	4.04	cpe:2.3:a:macpaw:cleanmymac_x:4.04:::::::*

CNA Affected

[
  {
    "product": "Clean My Mac",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Clean My Mac X 4.04"
      }
    ]
  }
]

References

www.talosintelligence.com/vulnerability_reports/TALOS-2018-0709

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

5.4

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2018-4036