Description (CNA)
In Canonical Multipass up to and including version 1.15.1 on macOS, incorrect default permissions allow a local attacker to escalate privileges by modifying files executed with administrative privileges by a Launch Daemon during system startup.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Canonical / Multipass | affected 0 before 1.16.0 |
CWE
CWE-276
References
- https://github.com/canonical/multipass/security/advisories/GHSA-2j82-p5cq-62p3
- https://github.com/canonical/multipass/pull/4115
ADP enrichment
No English description supplied.