Description (CNA)
BinaryNights ForkLift 3.x before 3.4 has a local privilege escalation vulnerability because the privileged helper tool implements an XPC interface that allows file operations to any process (copy, move, delete) as root and changing permissions.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://binarynights.com/blog/posts/forklift-3-4-security-update.html
- https://insinuator.net/2020/11/forklift-lpe/
ADP enrichment
No English description supplied.