Medium severity · published Mar 8, 2019
CVE-2018-4055
A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0
5.5
CVSS
0.5%
EPSS
No
On KEV
Description
A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to read any root file from the file system. An attacker would need local access to the machine to successfully exploit this flaw.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 44% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PR
Pixar Renderman · Talos
Renderman 22.2.0 for Mac OS X · source: vendor
RE
Renderman · Pixar
22.2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-4055
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-4055
Exploit
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0729
More from Pixar Renderman
7.8
CVE-2018-4054
A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0
7.8
CVE-2019-5015
A local privilege escalation vulnerability exists in the Mac OS X version of Pixar Renderman 22.3.0's Install Helper helper tool