CVE-2021-3187
First published: Mon Dec 11 2023(Updated: )
An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated, unprivileged user can elevate privileges by running a malicious script (that executes as root from a temporary directory) during install time. (This applies to macOS before 10.15.5, or Security Update 2020-003 on Mojave and High Sierra, Later versions of macOS are not vulnerable.)
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| BeyondTrust Privilege Management for Mac | <5.7 | |
| Any of | ||
| Apple Mac OS X | <10.15.5 | |
| Apple Mac OS X | >=10.13.0<10.13.6 | |
| Apple Mac OS X | >=10.14.0<10.14.6 | |
| Apple Mac OS X | =10.13.6 | |
| Apple Mac OS X | =10.13.6-security_update_2018-002 | |
| Apple Mac OS X | =10.13.6-security_update_2018-003 | |
| Apple Mac OS X | =10.13.6-security_update_2019-001 | |
| Apple Mac OS X | =10.13.6-security_update_2019-002 | |
| Apple Mac OS X | =10.13.6-security_update_2019-003 | |
| Apple Mac OS X | =10.13.6-security_update_2019-004 | |
| Apple Mac OS X | =10.13.6-security_update_2019-005 | |
| Apple Mac OS X | =10.13.6-security_update_2019-006 | |
| Apple Mac OS X | =10.13.6-security_update_2019-007 | |
| Apple Mac OS X | =10.13.6-security_update_2020-001 | |
| Apple Mac OS X | =10.13.6-security_update_2020-002 | |
| Apple Mac OS X | =10.14.6 | |
| Apple Mac OS X | =10.14.6-security_update_2019-001 | |
| Apple Mac OS X | =10.14.6-security_update_2019-002 | |
| Apple Mac OS X | =10.14.6-security_update_2019-004 | |
| Apple Mac OS X | =10.14.6-security_update_2019-005 | |
| Apple Mac OS X | =10.14.6-security_update_2019-006 | |
| Apple Mac OS X | =10.14.6-security_update_2019-007 | |
| Apple Mac OS X | =10.14.6-security_update_2020-001 | |
| Apple Mac OS X | =10.14.6-security_update_2020-002 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/mitre-cve
- collector/nvd-api
- vendor/beyondtrust
- canonical/beyondtrust privilege management for mac
- vendor/apple
- canonical/apple mac os x
- version/apple mac os x/10.13.0
- version/apple mac os x/10.14.0
- version/apple mac os x/10.13.6
- version/apple mac os x/10.13.6-security_update_2018-002
- version/apple mac os x/10.13.6-security_update_2018-003
- version/apple mac os x/10.13.6-security_update_2019-001
- version/apple mac os x/10.13.6-security_update_2019-002
- version/apple mac os x/10.13.6-security_update_2019-003
- version/apple mac os x/10.13.6-security_update_2019-004
- version/apple mac os x/10.13.6-security_update_2019-005
- version/apple mac os x/10.13.6-security_update_2019-006
- version/apple mac os x/10.13.6-security_update_2019-007
- version/apple mac os x/10.13.6-security_update_2020-001
- version/apple mac os x/10.13.6-security_update_2020-002
- version/apple mac os x/10.14.6
- version/apple mac os x/10.14.6-security_update_2019-001
- version/apple mac os x/10.14.6-security_update_2019-002
- version/apple mac os x/10.14.6-security_update_2019-004
- version/apple mac os x/10.14.6-security_update_2019-005
- version/apple mac os x/10.14.6-security_update_2019-006
- version/apple mac os x/10.14.6-security_update_2019-007
- version/apple mac os x/10.14.6-security_update_2020-001
- version/apple mac os x/10.14.6-security_update_2020-002