CVE-2024-10183CWE-276

Arbitrary File Write Vulnerability in Jamf Remote Assist Leading to Privilege Escalation

Medium · published October 22, 2024

CVSS v4.0
5.2
EPSS
0%
Percentile
3.3
In the wild
Unconfirmed
What it is

A vulnerability in Jamf Pro's Jamf Remote Assist tool allows a local, non-privileged user to escalate their privileges to root on MacOS systems.

The record
Technical detail
CVSS v4.0
5.2 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H
EPSS
0.00143 · 3.3th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2024-10-22T17:50Z
EPSS history
Timeline
  • 22 OCT 17:50Z
    Arbitrary File Write Vulnerability in Jamf Remote Assist Leading to Privilege Escalation
    cvelistv5