CVE-2020-11469

Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows a local process…

Medium · published April 1, 2020

CVSS v3.0
6.3
EPSS
0%
Percentile
35.0
In the wild
Unconfirmed
What it is

Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows a local process (with the user's privileges) to obtain root access by replacing runwithroot.

The record
Technical detail
CVSS v3.0
6.3 · MEDIUM
Vector
CVSS:3.0/AC:H/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:R
CVSS v4.0
Not supplied
EPSS
0.00418 · 35.0th percentile
Published
2020-04-01T22:01Z
EPSS history
Timeline
  • 01 APR 22:01Z
    Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows a local process…
    cvelistv5