CVE-2018-10407: Medium severity vmware carbon black vulnerability
An issue was discovered in Carbon Black Cb Response. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-10407?
CVE-2018-10407 is classified as a high severity vulnerability due to its potential to evade code signing checks.
How do I fix CVE-2018-10407?
To fix CVE-2018-10407, ensure that you are using the latest version of VMware Carbon Black that includes security patches addressing this vulnerability.
What systems are affected by CVE-2018-10407?
CVE-2018-10407 affects VMware Carbon Black Cb Response software across various versions.
What type of attack is possible with CVE-2018-10407?
CVE-2018-10407 allows attackers to deliver maliciously crafted Universal/fat binaries that can be mistakenly trusted as legitimate.
What should I do if I suspect I'm affected by CVE-2018-10407?
If you suspect you are affected by CVE-2018-10407, immediately audit your systems for any unauthorized software and update to the latest Carbon Black version.