CVE-2018-4047

Description

An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. An attacker with local access could exploit this vulnerability to modify the file system as root.

CVSS Version 3.1

nvd

CVE ID: CVE-2018-4047
Base Score: 5.5
Base Severity: MEDIUM
Vector String:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Impact Score: 3.6
Exploitability Score: 1.8

CVSS Version 3.0

cisco

CVE ID: CVE-2018-4047
Base Score: 7.1
Base Severity: HIGH
Vector String:CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

CVSS Version 2.0

nvd

CVE ID: CVE-2018-4047
Base Score: 4.9
Base Severity: MEDIUM
Vector String:AV:L/AC:L/Au:N/C:N/I:C/A:N

Refrence: NVDMITRE