CVE-2020-4008
Low
Description
The installer of the macOS Sensor for VMware Carbon Black Cloud (prior to 3.5.1) handles certain files in an insecure way. A malicious actor who has local access to the endpoint on which a macOS sensor is going to be installed, may overwrite a limited number of files with output from the sensor installation.
SeverityLow
CVSS3.6
Exploit probability—
Product
Vmware Carbon Black Cloud
PublishedDec 16, 2020
First seenDec 16, 2020
How to fix
Update
- vmware carbon_black_cloud3.5.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vmware carbon_black_cloud | v < 3.5.1 | 3.5.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.