CVE-2020-4008

2020-12-1614:17:31

vmware

www.cve.org

macos

vmware carbon black cloud

vulnerability

file overwrite

AI Score

3.9

Confidence

High

EPSS

Percentile

12.6%

JSON

The installer of the macOS Sensor for VMware Carbon Black Cloud (prior to 3.5.1) handles certain files in an insecure way. A malicious actor who has local access to the endpoint on which a macOS sensor is going to be installed, may overwrite a limited number of files with output from the sensor installation.

CNA Affected

[
  {
    "product": "VMware Carbon Black Cloud macOS Sensor",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware Carbon Black Cloud macOS Sensor (prior to 3.5.1)"
      }
    ]
  }
]

References

www.vmware.com/security/advisories/VMSA-2020-0028.html