7.1high
CVE-2018-4055
A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0.
Published 7 y ago · modified 4 mo ago · JSON
CVSS
7.1
v3.0 · CNA
CISA KEV
No
not known exploited
EPSS
0.5%
percentile 44%
Public exploits
0
none known
Summary
A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to read any root file from the file system. An attacker would need local access to the machine to successfully exploit this flaw.
Exploit prediction (EPSS)
0.52% probability of exploitation in the next 30 days, higher than 44% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 3.0 | 7.1 | CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N |
| NVD | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| CNA | 3.0 | 7.1 | CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N |
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Affected products
- Talos Pixar Renderman
Classification
- Weakness
- CWE-20 Improper Input Validation
References
- talosintelligence.com /vulnerability_reports/TALOS-2018-0729 · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2018-4055
- NVD: CVE-2018-4055
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.