beyondtrust

privilege_management_for_mac

2 known vulnerabilities · sorted by CVSS score

CVE-2021-3187

An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated, unprivileged user can elevate privileges by running a malicious script (that executes as root from a temporary directory) during install time. (This applies to macOS before 10.15.5, or Security Update 2020-003 on Mojave and High Sierra, Later versions of macOS are not vulnerable.)

beyondtrust / privilege_management_for_mac

Network

Published Dec 11, 2023

CVE-2021-3156

HIGH7.8

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

sudo_project / sudo+31

Local

Published Jan 26, 2021