CVE-2021-3747CWE-732

MacOS version of Multipass incorrect owner for application directory

High · published October 1, 2021

CVSS v3.1
8.8
EPSS
0%
Percentile
14.9
In the wild
Unconfirmed
What it is

The MacOS version of Multipass, version 1.7.0, fixed in 1.7.2, accidentally installed the application directory with incorrect owner.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00246 · 14.9th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2021-10-01T02:35Z
EPSS history
Timeline
  • 01 OCT 02:35Z
    MacOS version of Multipass incorrect owner for application directory
    cvelistv5