Vulnerability · Published Dec 16, 2020 · Assigned by vmware
CVE-2020-4008
Low 3.6
In plain English
A low-severity security flaw in VMware Carbon Black Cloud macOS Sensor. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).
Severity (CVSS NVD)3.6Low
Exploit odds (30 days)0.2%top 88.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The installer of the macOS Sensor for VMware Carbon Black Cloud (prior to 3.5.1) handles certain files in an insecure way. A malicious actor who has local access to the endpoint on which a macOS sensor is going to be installed, may overwrite a limited number of files with output from the sensor installation.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | VMware Carbon Black Cloud macOS Sensor | VMware Carbon Black Cloud macOS Sensor (prior to 3.5.1) |
References
- https://www.vmware.com/security/advisories/VMSA-2020-0028.html x_refsource_MISC