CVE-2021-3187
High
Description
An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated, unprivileged user can elevate privileges by running a malicious script (that executes as root from a temporary directory) during install time. (This applies to macOS before 10.15.5, or Security Update 2020-003 on Mojave and High Sierra, Later versions of macOS are not vulnerable.)
SeverityHigh
CVSS8.8
Exploit probability—
ProductBeyondtrust Privilege Management For Mac
PublishedDec 11, 2023
First seenDec 11, 2023
Weakness typeCWE-276CWE-276
How to fix
Update
- beyondtrust privilege_management_for_mac5.7 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| beyondtrust privilege_management_for_mac | v < 5.7 | 5.7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.