CVE-2019-5015 - A local privilege escalation vulnerability exists in the Mac OS X version of Pixar Renderman 22.3.0'

CVE-2019-5015

Summary

A local privilege escalation vulnerability exists in the Mac OS X version of Pixar Renderman 22.3.0's Install Helper helper tool. A user with local access can use this vulnerability to escalate their privileges to root. An attacker would need local access to the machine for a successful exploit.

References

https://talosintelligence.com/vulnerability_reports/TALOS-2019-0773
http://www.securityfocus.com/bid/107436

Vulnerable Configurations

cpe:2.3:a:pixar:renderman:22.3.0:*:*:*:*:macos:*:*
cpe:2.3:a:pixar:renderman:22.3.0:*:*:*:*:macos:*:*

CVSS

Base:	7.2 (as of 13-06-2022 - 18:55)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	107436
misc	https://talosintelligence.com/vulnerability_reports/TALOS-2019-0773

Last major update

13-06-2022 - 18:55

Published

08-03-2019 - 20:29

Last modified

13-06-2022 - 18:55