{"id":"CVE-2018-4047","state":"PUBLISHED","title":"An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. An attacker with local access coul","description":"An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. An attacker with local access could exploit this vulnerability to modify the file system as root.","publishedAt":"2019-01-10T15:00:00.000Z","updatedAt":"2024-08-05T05:04:28.906Z","severity":{"score":7.1,"label":"High","version":"3.0","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","source":"talos"},"assigner":"talos","products":["n/a Clean My Mac"],"affected":[{"vendor":"n/a","product":"Clean My Mac","versions":[{"version":"Clean My Mac X 4.04","status":"affected"}]}],"references":["https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0721"],"weaknesses":[],"ingestedAt":"2026-10-29T19:44:51.755Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/4xxx/CVE-2018-4047.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-4047","state":"PUBLISHED","datePublished":"2019-01-10T15:00:00.000Z","dateUpdated":"2024-08-05T05:04:28.906Z","assignerShortName":"talos","assignerOrgId":"b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b","dateReserved":"2018-01-02T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. An attacker with local access could exploit this vulnerability to modify the file system as root."}],"affected":[{"vendor":"n/a","product":"Clean My Mac","versions":[{"version":"Clean My Mac X 4.04","status":"affected"}]}],"references":[{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0721","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Improper Input Validation","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"talos","dateUpdated":"2022-04-19T18:08:55.000Z","orgId":"b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b"},"datePublic":"2019-01-10T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"talos-cna@cisco.com","ID":"CVE-2018-4047","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Clean My Mac","version":{"version_data":[{"version_value":"Clean My Mac X 4.04"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. An attacker with local access could exploit this vulnerability to modify the file system as root."}]},"impact":{"cvss":{"baseScore":7.1,"baseSeverity":"High","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","version":"3.0"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Improper Input Validation"}]}]},"references":{"reference_data":[{"name":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0721","refsource":"MISC","url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0721"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0721","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T05:04:28.906Z"}}]}}}