5.5med
CVE-2018-4178
A permissions issue existed in which execute permission was incorrectly granted.
Published 7 y ago · modified 4 mo ago · JSON
CVSS
5.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 18%
Public exploits
0
none known
Summary
A permissions issue existed in which execute permission was incorrectly granted. This issue was addressed with improved permission validation. This issue affected versions prior to macOS High Sierra 10.13.4.
Exploit prediction (EPSS)
0.26% probability of exploitation in the next 30 days, higher than 18% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 5.5 | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Affected products
- n/a macOS
Classification
- Weakness
- CWE-732 Incorrect Permission Assignment for Critical Resource
References
- support.apple.com /kb/HT208937 · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2018-4178
- NVD: CVE-2018-4178
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.