CVE-2021-3187
Severity Score
8.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated, unprivileged user can elevate privileges by running a malicious script (that executes as root from a temporary directory) during install time. (This applies to macOS before 10.15.5, or Security Update 2020-003 on Mojave and High Sierra, Later versions of macOS are not vulnerable.)
Se descubrió un problema en BeyondTrust Privilege Management para Mac anterior a la versión 5.7. Un usuario autenticado y sin privilegios puede elevar sus privilegios ejecutando un script malicioso (que se ejecuta como raíz desde un directorio temporal) durante el tiempo de instalación. (Esto se aplica a macOS anteriores a 10.15.5 o a la Actualización de seguridad 2020-003 en Mojave y High Sierra. Las versiones posteriores de macOS no son vulnerables).
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-01-21 CVE Reserved
- 2023-12-11 CVE Published
- 2023-12-15 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://www.beyondtrust.com/docs/release-notes/privilege-management/index.htm | Release Notes |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.beyondtrust.com/trust-center/security-advisories/bt22-06 | 2023-12-14 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | < 10.15.5 Search vendor "Apple" for product "Mac Os X" and version " < 10.15.5" | - |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | >= 10.13.0 < 10.13.6 Search vendor "Apple" for product "Mac Os X" and version " >= 10.13.0 < 10.13.6" | - |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | >= 10.14.0 < 10.14.6 Search vendor "Apple" for product "Mac Os X" and version " >= 10.14.0 < 10.14.6" | - |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | 10.13.6 Search vendor "Apple" for product "Mac Os X" and version "10.13.6" | - |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | 10.13.6 Search vendor "Apple" for product "Mac Os X" and version "10.13.6" | security_update_2018-002 |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | 10.13.6 Search vendor "Apple" for product "Mac Os X" and version "10.13.6" | security_update_2018-003 |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | 10.13.6 Search vendor "Apple" for product "Mac Os X" and version "10.13.6" | security_update_2019-001 |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | 10.13.6 Search vendor "Apple" for product "Mac Os X" and version "10.13.6" | security_update_2019-002 |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | 10.13.6 Search vendor "Apple" for product "Mac Os X" and version "10.13.6" | security_update_2019-003 |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | 10.13.6 Search vendor "Apple" for product "Mac Os X" and version "10.13.6" | security_update_2019-004 |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | 10.13.6 Search vendor "Apple" for product "Mac Os X" and version "10.13.6" | security_update_2019-005 |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | 10.13.6 Search vendor "Apple" for product "Mac Os X" and version "10.13.6" | security_update_2019-006 |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | 10.13.6 Search vendor "Apple" for product "Mac Os X" and version "10.13.6" | security_update_2019-007 |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | 10.13.6 Search vendor "Apple" for product "Mac Os X" and version "10.13.6" | security_update_2020-001 |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | 10.13.6 Search vendor "Apple" for product "Mac Os X" and version "10.13.6" | security_update_2020-002 |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | 10.14.6 Search vendor "Apple" for product "Mac Os X" and version "10.14.6" | - |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | 10.14.6 Search vendor "Apple" for product "Mac Os X" and version "10.14.6" | security_update_2019-001 |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | 10.14.6 Search vendor "Apple" for product "Mac Os X" and version "10.14.6" | security_update_2019-002 |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | 10.14.6 Search vendor "Apple" for product "Mac Os X" and version "10.14.6" | security_update_2019-004 |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | 10.14.6 Search vendor "Apple" for product "Mac Os X" and version "10.14.6" | security_update_2019-005 |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | 10.14.6 Search vendor "Apple" for product "Mac Os X" and version "10.14.6" | security_update_2019-006 |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | 10.14.6 Search vendor "Apple" for product "Mac Os X" and version "10.14.6" | security_update_2019-007 |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | 10.14.6 Search vendor "Apple" for product "Mac Os X" and version "10.14.6" | security_update_2020-001 |
Safe
|
| Beyondtrust Search vendor "Beyondtrust" | Privilege Management For Mac Search vendor "Beyondtrust" for product "Privilege Management For Mac" | < 5.7 Search vendor "Beyondtrust" for product "Privilege Management For Mac" and version " < 5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | 10.14.6 Search vendor "Apple" for product "Mac Os X" and version "10.14.6" | security_update_2020-002 |
Safe
|