{"containers": {"cna": {"affected": [{"product": "Little Snitch", "vendor": "n/a", "versions": [{"status": "affected", "version": "4.3 - 4.3.2"}]}], "descriptions": [{"lang": "en", "value": "Little Snitch versions 4.3.0 to 4.3.2 have a local privilege escalation vulnerability in their privileged helper tool. The privileged helper tool implements an XPC interface which is available to any process and allows directory listings and copying files as root."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-264", "description": "CWE-264: Permissions, Privileges, and Access Controls", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2019-08-23T16:58:49", "orgId": "e0cebea7-a708-4bfe-81c1-855d35eb4544", "shortName": "obdev"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://obdev.at/cve/2019-13013-OSv2mEFD3z.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2019-13013", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Little Snitch", "version": {"version_data": [{"version_value": "4.3 - 4.3.2"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Little Snitch versions 4.3.0 to 4.3.2 have a local privilege escalation vulnerability in their privileged helper tool. The privileged helper tool implements an XPC interface which is available to any process and allows directory listings and copying files as root."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-264: Permissions, Privileges, and Access Controls"}]}]}, "references": {"reference_data": [{"name": "https://obdev.at/cve/2019-13013-OSv2mEFD3z.html", "refsource": "MISC", "url": "https://obdev.at/cve/2019-13013-OSv2mEFD3z.html"}]}}}}, "cveMetadata": {"assignerOrgId": "e0cebea7-a708-4bfe-81c1-855d35eb4544", "assignerShortName": "obdev", "cveId": "CVE-2019-13013", "datePublished": "2019-08-23T16:58:49", "dateReserved": "2019-06-28T00:00:00", "dateUpdated": "2019-08-23T16:58:49", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:obdev:little_snitch:*:*:*:*:*:*:*:*", "matchCriteriaId": "5EFAECAF-FD32-468D-BE5C-6936FD1B46B8", "versionEndIncluding": "4.3.2", "versionStartIncluding": "4.3.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Little Snitch versions 4.3.0 to 4.3.2 have a local privilege escalation vulnerability in their privileged helper tool. The privileged helper tool implements an XPC interface which is available to any process and allows directory listings and copying files as root."}, {"lang": "es", "value": "Little Snitch versiones 4.3.0 a 4.3.2 tienen una vulnerabilidad de escalada de privilegios locales en su herramienta auxiliar privilegiada. La herramienta auxiliar privilegiada implementa una interfaz XPC que est\u00e1 disponible para cualquier proceso y permite listados de directorios y copia de archivos como root."}], "id": "CVE-2019-13013", "lastModified": "2023-11-07T03:03:44.923", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.9, "confidentialityImpact": "COMPLETE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-08-23T17:15:13.607", "references": [{"source": "office@obdev.at", "url": "https://obdev.at/cve/2019-13013-OSv2mEFD3z.html"}], "sourceIdentifier": "office@obdev.at", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-264"}], "source": "office@obdev.at", "type": "Secondary"}]}

{}