Skip to content
OpenAdvisories
Unscored CVE-2020-13095 EUVD-2020-5372GHSA-7pqf-c737-ccf9

Little Snitch version 4.5.1 and older changed ownership of a directory path controlled by the user. This allowed the user to escalate to ro…

Published Jun 30, 2020 · Updated Aug 4, 2024 · Assigned by obdev

Description

Little Snitch version 4.5.1 and older changed ownership of a directory path controlled by the user. This allowed the user to escalate to root by linking the path to a directory containing code executed by root.

Affected products

VendorProductAffectedFixed
— Little Snitch up to 4.5.1 —

References