CVE-2019-5011CWE-459

An exploitable privilege escalation vulnerability exists in the helper service CleanMyMac X, version 4.20, due to improper updating

High · published March 21, 2019

CVSS v3.0
7.1
EPSS
0%
Percentile
32.8
In the wild
Unconfirmed
What it is

An exploitable privilege escalation vulnerability exists in the helper service CleanMyMac X, version 4.20, due to improper updating. The application failed to remove the vulnerable components upon upgrading to the latest version, leaving the user open to attack. A user with local access can use this vulnerability to modify the file system as root. An attacker would need local access to the machine for a successful exploit.

The record
Technical detail
CVSS v3.0
7.1 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00398 · 32.8th percentile
Weakness
CWE-459 · Incomplete Cleanup
Published
2019-03-21T14:50Z
EPSS history
Timeline
  • 21 MAR 14:50Z
    An exploitable privilege escalation vulnerability exists in the helper service CleanMyMac X, version 4.20, due to improper updating
    cvelistv5