Privilege Escalation Vulnerability in BeyondTrust Privilege Management for Mac

CVE-2021-3187

What is CVE-2021-3187?

A vulnerability has been identified in BeyondTrust Privilege Management for Mac that allows an authenticated, unprivileged user to gain elevated privileges. By executing a malicious script that runs as root from a temporary directory during installation, attackers can exploit this flaw on macOS versions prior to 10.15.5, or those that have not received Security Update 2020-003 on Mojave and High Sierra. This issue does not affect later versions of macOS.

References