Vulnerability · Published Dec 7, 2020 · Assigned by tenable
CVE-2020-5798
High 7.8
In plain English
A high-severity security flaw in Druva inSync macOS Client Installers for v6.8.0 and prior. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.3%top 77.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
inSync Client installer for macOS versions v6.8.0 and prior could allow an attacker to gain privileges of a root user from a lower privileged user due to improper integrity checks and directory permissions.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Druva inSync macOS Client Installers for v6.8.0 and prior | Druva inSync macOS Client Installers for v6.8.0 and prior |