Lucene search

TalosCVE-2018-4055

HistoryMar 08, 2019 - 8:29 p.m.

CVE-2018-4055

2019-03-0820:29:00

CWE-20

talos

web.nvd.nist.gov

security

vulnerability

local

privilege escalation

pixar renderman

mac os x

cve-2018-4055

nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.5

Confidence

High

EPSS

Percentile

5.1%

JSON

A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to read any root file from the file system. An attacker would need local access to the machine to successfully exploit this flaw.

Affected configurations

Nvd

Vulners

Node

pixarrendermanMatch22.2.0mac_os_x

VendorProductVersionCPE
pixarrenderman22.2.0cpe:2.3:a:pixar:renderman:22.2.0:*:*:*:*:mac_os_x:*:*

Vendor	Product	Version	CPE
pixar	renderman	22.2.0	cpe:2.3:a:pixar:renderman:22.2.0:::::mac_os_x::

CNA Affected

[
  {
    "product": "Pixar Renderman",
    "vendor": "Talos",
    "versions": [
      {
        "status": "affected",
        "version": "Renderman 22.2.0 for Mac OS X"
      }
    ]
  }
]

References

talosintelligence.com/vulnerability_reports/TALOS-2018-0729

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.5

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2018-4055