← CVE Intelligence

CVE-2024-6240

Improper privilege management vulnerability in Parallels Desktop PUBLISHED

Description (CNA)

Improper privilege management vulnerability in Parallels Desktop Software, which affects versions earlier than 19.3.0. An attacker could add malicious code in a script and populate the BASH_ENV environment variable with the path to the malicious script, executing on application startup. An attacker could exploit this vulnerability to escalate privileges on the system.

Affected (CNA)

Vendor / productVersions
Parallels / Parallels Desktopaffected 0 before 19.3.0

CWE

CWE-269

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.