Description (CNA)
Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. The vulnerability is related to the installation of the configuration file "at.obdev.littlesnitchd.plist" which gets installed to /Library/LaunchDaemons.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Objective Development Software GmbH / Little Snitch | affected 3.0 - 3.7.3 |
CWE
No CWE identifiers supplied.
References
- https://www.obdev.at/products/littlesnitch/releasenotes.html
- https://twitter.com/patrickwardle/status/849076615170711552
ADP enrichment
No English description supplied.