Vulnerability Details : CVE-2021-3187
An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated, unprivileged user can elevate privileges by running a malicious script (that executes as root from a temporary directory) during install time. (This applies to macOS before 10.15.5, or Security Update 2020-003 on Mojave and High Sierra, Later versions of macOS are not vulnerable.)
Products affected by CVE-2021-3187
- cpe:2.3:a:beyondtrust:privilege_management_for_mac:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2021-3187
0.09%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 39 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-3187
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
8.8
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST |
References for CVE-2021-3187
-
https://www.beyondtrust.com/docs/release-notes/privilege-management/index.htm
Privilege Management Release NotesRelease Notes
-
https://www.beyondtrust.com/trust-center/security-advisories/bt22-06
Vendor Advisory
Jump to