Design/Logic Flaw

2020-06-3017:15:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

Little Snitch version 4.5.1 and older changed ownership of a directory path controlled by the user. This allowed the user to escalate to root by linking the path to a directory containing code executed by root.

CPENameOperatorVersion
little_snitchle4.5.1

CPE	Name	Operator	Version
	little_snitch	le	4.5.1

References

obdev.at/cve/2020-13095-t46oXJJOwz.html