High severity · published Mar 8, 2019
CVE-2018-4054
A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0
7.8
CVSS
0.7%
EPSS
No
On KEV
Description
A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to escalate their privileges to root. An attacker would need local access to the machine to successfully exploit this flaw.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 52% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PR
Pixar Renderman · Talos
Renderman 22.2.0 for Mac OS X · source: vendor
RE
Renderman · Pixar
22.2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-4054
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-4054
Exploit
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0728
More from Pixar Renderman
7.8
CVE-2019-5015
A local privilege escalation vulnerability exists in the Mac OS X version of Pixar Renderman 22.3.0's Install Helper helper tool
5.5
CVE-2018-4055
A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0