Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveAppCheckCVE-2023-41138
HistoryNov 09, 2023 - 3:15 p.m.

CVE-2023-41138

2023-11-0915:15:08
CWE-269
CWE-226
AppCheck
web.nvd.nist.gov
19
cve-2023-41138
appsanywhere
macos
privileged helper
elevated permissions
nvd

CVSS3

7.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

6.5

Confidence

High

EPSS

0

Percentile

5.1%

JSON

The AppsAnywhere macOS client-privileged helper can be tricked into executing arbitrary commands with elevated permissions by a local user process.

Affected configurations

Nvd
Node
appsanywhereappsanywhere_clientMatch1.4.0macos
OR
appsanywhereappsanywhere_clientMatch1.4.1macos
OR
appsanywhereappsanywhere_clientMatch1.5.1macos
OR
appsanywhereappsanywhere_clientMatch1.5.2macos
OR
appsanywhereappsanywhere_clientMatch1.6.0macos
OR
appsanywhereappsanywhere_clientMatch2.0.0macos
VendorProductVersionCPE
appsanywhereappsanywhere_client1.4.0cpe:2.3:a:appsanywhere:appsanywhere_client:1.4.0:*:*:*:*:macos:*:*
appsanywhereappsanywhere_client1.4.1cpe:2.3:a:appsanywhere:appsanywhere_client:1.4.1:*:*:*:*:macos:*:*
appsanywhereappsanywhere_client1.5.1cpe:2.3:a:appsanywhere:appsanywhere_client:1.5.1:*:*:*:*:macos:*:*
appsanywhereappsanywhere_client1.5.2cpe:2.3:a:appsanywhere:appsanywhere_client:1.5.2:*:*:*:*:macos:*:*
appsanywhereappsanywhere_client1.6.0cpe:2.3:a:appsanywhere:appsanywhere_client:1.6.0:*:*:*:*:macos:*:*
appsanywhereappsanywhere_client2.0.0cpe:2.3:a:appsanywhere:appsanywhere_client:2.0.0:*:*:*:*:macos:*:*

CNA Affected

[
  {
    "vendor": "AppsAnywhere",
    "product": "AppsAnywhere Client",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "1.4.0",
        "status": "affected"
      },
      {
        "version": "1.4.1",
        "status": "affected"
      },
      {
        "version": "1.5.1",
        "status": "affected"
      },
      {
        "version": "1.5.2",
        "status": "affected"
      },
      {
        "version": "1.6.0",
        "status": "affected"
      },
      {
        "version": "2.0.0",
        "status": "affected"
      },
      {
        "version": "1.6.1",
        "status": "unaffected"
      },
      {
        "version": "2.0.1",
        "status": "unaffected"
      },
      {
        "version": "2.2.0",
        "status": "unaffected"
      }
    ]
  }
]

Related

prion 1
cvelist 1
nvd 1
vulnrichment 1
prion
prion
Code injection
2023-11-09 15:15:00
cvelist
cvelist
CVE-2023-41138
2023-11-09 15:05:24
nvd
nvd
CVE-2023-41138
2023-11-09 15:15:08
vulnrichment
vulnrichment
CVE-2023-41138
2023-11-09 15:05:24

CVSS3

7.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

6.5

Confidence

High

EPSS

0

Percentile

5.1%

JSON
Related for CVE-2023-41138
prion1cvelist1nvd1vulnrichment1