CVE-2024-1417CWE-77

Local Code Injection Vulnerability in AuthPoint Password Manager App for macOS Safari

High · published May 16, 2024

CVSS v3.1
7.8
EPSS
1%
Percentile
53.4
In the wild
Unconfirmed
What it is

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in WatchGuard AuthPoint Password Manager on MacOS allows an a adversary with local access to execute code under the context of the AuthPoint Password Manager application.

This issue affects AuthPoint Password Manager for MacOS versions before 1.0.6.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00721 · 53.4th percentile
Weakness
CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published
2024-05-16T17:56Z
EPSS history
Timeline
  • 16 MAY 17:56Z
    Local Code Injection Vulnerability in AuthPoint Password Manager App for macOS Safari
    cvelistv5