Incorrect Default Permissions
CVE-2020-25593
Summary
Acronis True Image through 2021 on macOS allows local privilege escalation from admin to root due to insecure folder permissions.
- LOW
- LOCAL
- HIGH
- UNCHANGED
- NONE
- HIGH
- HIGH
- HIGH
CWE-276 - Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
References
Advisory Timeline
- Published