Lucene search
HistoryMar 03, 2023 - 10:15 p.m.
CVE-2023-27574
shadowsocksx-ng
1.10.0
com.apple.security.get-task-allow
code_signing_inject_base_entitlements
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
56.3%
ShadowsocksX-NG 1.10.0 signs with com.apple.security.get-task-allow entitlements because of CODE_SIGNING_INJECT_BASE_ENTITLEMENTS.
Affected configurations
Node
shadowsocksshadowsocksx-ngMatch1.10.0
Related
cvelist
cvelist
CVE-2023-27574
2023-03-03 00:00:00
cve
cve
CVE-2023-27574
2023-03-03 22:15:10
osv
osv
CVE-2023-27574
2023-03-03 22:15:10
prion
prion
Code injection
2023-03-03 22:15:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
56.3%
Related for NVD:CVE-2023-27574