CVE-2020-9858

EPSS 0.06%
Published 09.06.2020 17:15:15
Last modified 21.11.2024 05:41:25
Source product-security@apple.com
Teams watchlist Login
Open Login

A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 (v. 1A11). Running the installer in an untrusted directory may result in arbitrary code execution.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ Windows Migration Assistant Version < 2.2.0.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.06%	0.167

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov	4.4	3.4	6.4	AV:L/AC:M/Au:N/C:P/I:P/A:P

CWE-427 Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

https://support.apple.com/HT211186

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-9858

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-9858

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-9858

EUVD