CVE-2024-27357

Published: Jul 26, 2024Modified: Nov 21, 2024

5.8

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N

Exploitability: 0.6 / Impact: 5.2

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue was discovered in WithSecure Elements Agent through 23.x for macOS, WithSecure Elements Client Security through 23.x for macOS, and WithSecure MDR through 23.x for macOS. Local Privilege Escalation can occur during installations or updates by admins.

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

https://www.withsecure.com/en/support/security-advisories/cve-2024-27357

Source: cve@mitre.org

https://www.withsecure.com/en/support/security-advisories/cve-2024-27357

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.