{"id":"CVE-2024-27357","state":"PUBLISHED","title":"An issue was discovered in WithSecure Elements Agent through 23.x for macOS, WithSecure Elements Client Security through 23.x for macOS, and WithSecure MDR through 23.x for macOS. ","description":"An issue was discovered in WithSecure Elements Agent through 23.x for macOS, WithSecure Elements Client Security through 23.x for macOS, and WithSecure MDR through 23.x for macOS. Local Privilege Escalation can occur during installations or updates by admins.","publishedAt":"2024-07-26T00:00:00.000Z","updatedAt":"2024-08-02T00:34:52.022Z","severity":{"score":5.8,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N","source":"CISA-ADP"},"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://www.withsecure.com/en/support/security-advisories/cve-2024-27357"],"weaknesses":["CWE-269"],"ingestedAt":"2026-10-29T20:07:10.607Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/27xxx/CVE-2024-27357.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-27357","state":"PUBLISHED","datePublished":"2024-07-26T00:00:00.000Z","dateUpdated":"2024-08-02T00:34:52.022Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2024-02-25T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An issue was discovered in WithSecure Elements Agent through 23.x for macOS, WithSecure Elements Client Security through 23.x for macOS, and WithSecure MDR through 23.x for macOS. Local Privilege Escalation can occur during installations or updates by admins."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://www.withsecure.com/en/support/security-advisories/cve-2024-27357"}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"n/a"}]}],"providerMetadata":{"shortName":"mitre","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateUpdated":"2024-07-26T16:39:12.491Z"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"withsecure","product":"elements_endpoint_protection","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"24.0","versionType":"custom"}],"cpes":["cpe:2.3:a:withsecure:elements_endpoint_protection:*:*:*:*:*:macos:*:*"]},{"vendor":"withsecure","product":"client_security","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThanOrEqual":"15.0","versionType":"custom"}],"cpes":["cpe:2.3:a:withsecure:client_security:*:*:*:*:*:macos:*:*"]}],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.8,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2024-07-26T19:10:41.338827Z","id":"CVE-2024-27357","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-269","type":"CWE","lang":"en","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-29T20:17:41.458Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.withsecure.com/en/support/security-advisories/cve-2024-27357","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T00:34:52.022Z"}}]}}}