CVE-2021-3187 - Vulnerability Details

Vendors	Products
Apple	Mac Os X
Beyondtrust	Privilege Management For Mac

Link	Providers
https://www.beyondtrust.com/docs/release-notes/privilege-management/index.htm
https://www.beyondtrust.com/trust-center/security-advisories/bt22-06

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2021-3187", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-08-03T16:45:51.414Z", "dateReserved": "2021-01-21T00:00:00", "datePublished": "2023-12-11T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-12-11T22:28:02.851717"}, "descriptions": [{"lang": "en", "value": "An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated, unprivileged user can elevate privileges by running a malicious script (that executes as root from a temporary directory) during install time. (This applies to macOS before 10.15.5, or Security Update 2020-003 on Mojave and High Sierra, Later versions of macOS are not vulnerable.)"}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://www.beyondtrust.com/docs/release-notes/privilege-management/index.htm"}, {"url": "https://www.beyondtrust.com/trust-center/security-advisories/bt22-06"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T16:45:51.414Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.beyondtrust.com/docs/release-notes/privilege-management/index.htm", "tags": ["x_transferred"]}, {"url": "https://www.beyondtrust.com/trust-center/security-advisories/bt22-06", "tags": ["x_transferred"]}]}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2021-3187 (string)

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

dateUpdated : 2024-08-03T16:45:51.414Z (string)

dateReserved : 2021-01-21T00:00:00 (string)

datePublished : 2023-12-11T00:00:00 (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

dateUpdated : 2023-12-11T22:28:02.851717 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated, unprivileged user can elevate privileges by running a malicious script (that executes as root from a temporary directory) during install time. (This applies to macOS before 10.15.5, or Security Update 2020-003 on Mojave and High Sierra, Later versions of macOS are not vulnerable.) (string)

}

]

affected : [ »

0 : { »

vendor : n/a (string)

product : n/a (string)

versions : [ »

0 : { »

version : n/a (string)

status : affected (string)

}

]

}

]

references : [ »

0 : { »

url : https://www.beyondtrust.com/docs/release-notes/privilege-management/index.htm (string)

}

1 : { »

url : https://www.beyondtrust.com/trust-center/security-advisories/bt22-06 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : text (string)

lang : en (string)

description : n/a (string)

}

]

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T16:45:51.414Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://www.beyondtrust.com/docs/release-notes/privilege-management/index.htm (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://www.beyondtrust.com/trust-center/security-advisories/bt22-06 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

]

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:beyondtrust:privilege_management_for_mac:*:*:*:*:*:*:*:*", "matchCriteriaId": "BC343748-692C-4F60-8E85-35274289A093", "versionEndExcluding": "5.7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "matchCriteriaId": "99973242-A249-4C34-B042-5F833AE73708", "versionEndExcluding": "10.15.5", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "matchCriteriaId": "2DA1C24E-B74D-4C8C-931D-AE35BFB4F0CC", "versionEndExcluding": "10.13.6", "versionStartIncluding": "10.13.0", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "matchCriteriaId": "3E76BECE-0843-4B9F-90DE-7690764701B0", "versionEndExcluding": "10.14.6", "versionStartIncluding": "10.14.0", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:-:*:*:*:*:*:*", "matchCriteriaId": "297D2D0C-EA9D-4B2C-9357-D88DB6C7143A", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2018-002:*:*:*:*:*:*", "matchCriteriaId": "0D845143-1B4D-478B-B83E-8F1664CBCAC3", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2018-003:*:*:*:*:*:*", "matchCriteriaId": "23C6DF6A-9A30-4F9E-BD9C-C19D8551C6DA", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-001:*:*:*:*:*:*", "matchCriteriaId": "754A2DF4-8724-4448-A2AB-AC5442029CB7", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-002:*:*:*:*:*:*", "matchCriteriaId": "D392C777-1949-4920-B459-D083228E4688", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-003:*:*:*:*:*:*", "matchCriteriaId": "68B0A232-F2A4-4B87-99EB-3A532DFA87DA", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-004:*:*:*:*:*:*", "matchCriteriaId": "0DF528F7-0F1E-4E55-A088-91327E3C360C", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-005:*:*:*:*:*:*", "matchCriteriaId": "E222445A-D398-47C8-9639-4BAE36B69AA1", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-006:*:*:*:*:*:*", "matchCriteriaId": "9425DAC8-038D-4B09-A074-3780AED912FA", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-007:*:*:*:*:*:*", "matchCriteriaId": "8EA63C1C-1EEC-4961-A7B7-439D21293B99", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2020-001:*:*:*:*:*:*", "matchCriteriaId": "B2F5D631-2306-4526-BEE5-22456D95ABAB", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2020-002:*:*:*:*:*:*", "matchCriteriaId": "F79B7361-F2F2-4FA6-A27D-CC8F2D37A726", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*", "matchCriteriaId": "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*", "matchCriteriaId": "CFE26ECC-A2C2-4501-9950-510DE0E1BD86", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*", "matchCriteriaId": "26108BEF-0847-4AB0-BD98-35344DFA7835", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*", "matchCriteriaId": "A369D48B-6A0A-47AE-9513-D5E2E6F30931", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*", "matchCriteriaId": "510F8317-94DA-498E-927A-83D5F41AF54A", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*", "matchCriteriaId": "0D5D1970-6D2A-42CA-A203-42023D71730D", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*", "matchCriteriaId": "C68AE52B-5139-40A4-AE9A-E752DBF07D1B", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*", "matchCriteriaId": "0FD3467D-7679-479F-9C0B-A93F7CD0929D", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*", "matchCriteriaId": "D4C6098E-EDBD-4A85-8282-B2E9D9333872", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated, unprivileged user can elevate privileges by running a malicious script (that executes as root from a temporary directory) during install time. (This applies to macOS before 10.15.5, or Security Update 2020-003 on Mojave and High Sierra, Later versions of macOS are not vulnerable.)"}, {"lang": "es", "value": "Se descubri\u00f3 un problema en BeyondTrust Privilege Management para Mac anterior a la versi\u00f3n 5.7. Un usuario autenticado y sin privilegios puede elevar sus privilegios ejecutando un script malicioso (que se ejecuta como ra\u00edz desde un directorio temporal) durante el tiempo de instalaci\u00f3n. (Esto se aplica a macOS anteriores a 10.15.5 o a la Actualizaci\u00f3n de seguridad 2020-003 en Mojave y High Sierra. Las versiones posteriores de macOS no son vulnerables)."}], "id": "CVE-2021-3187", "lastModified": "2024-11-21T06:21:06.000", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-12-11T23:15:07.530", "references": [{"source": "cve@mitre.org", "tags": ["Release Notes"], "url": "https://www.beyondtrust.com/docs/release-notes/privilege-management/index.htm"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://www.beyondtrust.com/trust-center/security-advisories/bt22-06"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "https://www.beyondtrust.com/docs/release-notes/privilege-management/index.htm"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.beyondtrust.com/trust-center/security-advisories/bt22-06"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:beyondtrust:privilege_management_for_mac:*:*:*:*:*:*:*:* (string)

matchCriteriaId : BC343748-692C-4F60-8E85-35274289A093 (string)

versionEndExcluding : 5.7 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 99973242-A249-4C34-B042-5F833AE73708 (string)

versionEndExcluding : 10.15.5 (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 2DA1C24E-B74D-4C8C-931D-AE35BFB4F0CC (string)

versionEndExcluding : 10.13.6 (string)

versionStartIncluding : 10.13.0 (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 3E76BECE-0843-4B9F-90DE-7690764701B0 (string)

versionEndExcluding : 10.14.6 (string)

versionStartIncluding : 10.14.0 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:o:apple:mac_os_x:10.13.6:-:*:*:*:*:*:* (string)

matchCriteriaId : 297D2D0C-EA9D-4B2C-9357-D88DB6C7143A (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2018-002:*:*:*:*:*:* (string)

matchCriteriaId : 0D845143-1B4D-478B-B83E-8F1664CBCAC3 (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2018-003:*:*:*:*:*:* (string)

matchCriteriaId : 23C6DF6A-9A30-4F9E-BD9C-C19D8551C6DA (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-001:*:*:*:*:*:* (string)

matchCriteriaId : 754A2DF4-8724-4448-A2AB-AC5442029CB7 (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-002:*:*:*:*:*:* (string)

matchCriteriaId : D392C777-1949-4920-B459-D083228E4688 (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-003:*:*:*:*:*:* (string)

matchCriteriaId : 68B0A232-F2A4-4B87-99EB-3A532DFA87DA (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-004:*:*:*:*:*:* (string)

matchCriteriaId : 0DF528F7-0F1E-4E55-A088-91327E3C360C (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-005:*:*:*:*:*:* (string)

matchCriteriaId : E222445A-D398-47C8-9639-4BAE36B69AA1 (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-006:*:*:*:*:*:* (string)

matchCriteriaId : 9425DAC8-038D-4B09-A074-3780AED912FA (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-007:*:*:*:*:*:* (string)

matchCriteriaId : 8EA63C1C-1EEC-4961-A7B7-439D21293B99 (string)

vulnerable : false (boolean)

}

13 : { »

criteria : cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2020-001:*:*:*:*:*:* (string)

matchCriteriaId : B2F5D631-2306-4526-BEE5-22456D95ABAB (string)

vulnerable : false (boolean)

}

14 : { »

criteria : cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2020-002:*:*:*:*:*:* (string)

matchCriteriaId : F79B7361-F2F2-4FA6-A27D-CC8F2D37A726 (string)

vulnerable : false (boolean)

}

15 : { »

criteria : cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:* (string)

matchCriteriaId : 693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C (string)

vulnerable : false (boolean)

}

16 : { »

criteria : cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:* (string)

matchCriteriaId : CFE26ECC-A2C2-4501-9950-510DE0E1BD86 (string)

vulnerable : false (boolean)

}

17 : { »

criteria : cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:* (string)

matchCriteriaId : 26108BEF-0847-4AB0-BD98-35344DFA7835 (string)

vulnerable : false (boolean)

}

18 : { »

criteria : cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:* (string)

matchCriteriaId : A369D48B-6A0A-47AE-9513-D5E2E6F30931 (string)

vulnerable : false (boolean)

}

19 : { »

criteria : cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:* (string)

matchCriteriaId : 510F8317-94DA-498E-927A-83D5F41AF54A (string)

vulnerable : false (boolean)

}

20 : { »

criteria : cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:* (string)

matchCriteriaId : 0D5D1970-6D2A-42CA-A203-42023D71730D (string)

vulnerable : false (boolean)

}

21 : { »

criteria : cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:* (string)

matchCriteriaId : C68AE52B-5139-40A4-AE9A-E752DBF07D1B (string)

vulnerable : false (boolean)

}

22 : { »

criteria : cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:* (string)

matchCriteriaId : 0FD3467D-7679-479F-9C0B-A93F7CD0929D (string)

vulnerable : false (boolean)

}

23 : { »

criteria : cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:* (string)

matchCriteriaId : D4C6098E-EDBD-4A85-8282-B2E9D9333872 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated, unprivileged user can elevate privileges by running a malicious script (that executes as root from a temporary directory) during install time. (This applies to macOS before 10.15.5, or Security Update 2020-003 on Mojave and High Sierra, Later versions of macOS are not vulnerable.) (string)

}

1 : { »

lang : es (string)

value : Se descubrió un problema en BeyondTrust Privilege Management para Mac anterior a la versión 5.7. Un usuario autenticado y sin privilegios puede elevar sus privilegios ejecutando un script malicioso (que se ejecuta como raíz desde un directorio temporal) durante el tiempo de instalación. (Esto se aplica a macOS anteriores a 10.15.5 o a la Actualización de seguridad 2020-003 en Mojave y High Sierra. Las versiones posteriores de macOS no son vulnerables). (string)

}

]

id : CVE-2021-3187 (string)

lastModified : 2024-11-21T06:21:06.000 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 8.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-12-11T23:15:07.530 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Release Notes (string)

]

url : https://www.beyondtrust.com/docs/release-notes/privilege-management/index.htm (string)

}

1 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.beyondtrust.com/trust-center/security-advisories/bt22-06 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Release Notes (string)

]

url : https://www.beyondtrust.com/docs/release-notes/privilege-management/index.htm (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.beyondtrust.com/trust-center/security-advisories/bt22-06 (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object