What is CVE-2019-13013?

CVE-2019-13013 is a medium-severity vulnerability in Apple Macos, classified under CWE-264. CVSS score: 5.5/10. Published 2019-08-23.

How severe is CVE-2019-13013?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Auth bypass in Apple Macos

CVE-2019-13013

Little Snitch versions 4.3.0 to 4.3.2 have a local privilege escalation vulnerability in their privileged helper tool. The privileged helper tool implements an XPC interface which is available to any process and allows directory listings and copying files as root.

EPSS: 0.003 (22.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Apple Macos
Obdev Little_snitch
N/a Little Snitch — versions 4.3 - 4.3.2

Weakness classification (CWE)

CWE-264
CWE-862 — Missing Authorization

References

office@obdev.at (x_refsource_MISC)

Frequently asked questions

What is CVE-2019-13013?: CVE-2019-13013 is a medium-severity vulnerability in Apple Macos, classified under CWE-264. CVSS score: 5.5/10. Published 2019-08-23.
How severe is CVE-2019-13013?: Medium severity. CVSS v3 base score is 5.5 out of 10.