VULNERABILITY INTELLIGENCE

CVE-2019-13013

CVSS score5.5 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2019-08-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Little Snitch versions 4.3.0 to 4.3.2 have a local privilege escalation vulnerability in their privileged helper tool. The privileged helper tool implements an XPC interface which is available to any process and allows directory listings and copying files as root.

Weakness classification

  • CWE-862: Missing Authorization

Primary references