Vulnerability · Published Jun 30, 2022 · Assigned by mitre
CVE-2022-27904
High 7.0
In plain English
A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).
Severity (CVSS NVD)7.0High
Exploit odds (30 days)0.2%top 93.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Automox Agent for macOS before version 39 was vulnerable to a time-of-check/time-of-use (TOCTOU) race-condition attack during the agent install process.
Affected products (as reported)
References
- https://automox.com x_refsource_MISC
- https://www.automox.com/security/security-bulletin x_refsource_MISC