CVE-2019-17103CWE-276

Get-task-allow entitlement via BDLDaemon on macOS

Medium · published January 27, 2020

CVSS v3.1
4.9
EPSS
0%
Percentile
17.2
In the wild
Unconfirmed
What it is

An Incorrect Default Permissions vulnerability in the BDLDaemon component of Bitdefender AV for Mac allows an attacker to elevate permissions to read protected directories. This issue affects: Bitdefender AV for Mac versions prior to 8.0.0.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00263 · 17.2th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2020-01-27T14:10Z
EPSS history
Timeline
  • 27 JAN 14:10Z
    Get-task-allow entitlement via BDLDaemon on macOS
    cvelistv5