CVE-2024-46060: Command Injection
Anaconda3 macOS installers before 2024.06-1 contain a local privilege escalation vulnerability when installed outside the user's home directory. During installation, world-writable files are created and executed with root privileges. This allows a local low-privileged user to inject arbitrary commands, leading to code execution as the root user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46060?
CVE-2024-46060 has been classified as a high severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2024-46060?
To fix CVE-2024-46060, users should upgrade Anaconda3 to version 2024.06-1 or later.
What type of vulnerability is CVE-2024-46060?
CVE-2024-46060 is a local privilege escalation vulnerability.
Who is affected by CVE-2024-46060?
Users who installed Anaconda3 on macOS outside their home directory before version 2024.06-1 are affected by CVE-2024-46060.
What can attackers do with CVE-2024-46060?
Attackers can exploit CVE-2024-46060 to execute arbitrary commands with root privileges on a vulnerable system.