CVE-2023-40307

An attacker with standard privileges on macOS when requesting administrator privileges from the application can submit input which causes a buffer overflow resulting in a crash of the application. This could make the application unavailable and allow reading or modification of data.

Score

CVSS 3.1 7.8 High

Status

Modified - cna@sap.com

Published

2023-09-28

Last modified

2024-09-23

Weaknesses

CWE-787

Affected products

• Privileges (Sap)
• Sap Privileges (Sap Se)

References

• https://github.com/SAP/macOS-enterprise-privileges/security/advisories/GHSA-rgq4-wxpj-5jv9