Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-15349. PoCs published by Traxes.
AI-analyzed exploit summary This repository contains a working proof-of-concept exploit for CVE-2020-15349, which leverages an unauthorized XPC connection to the Forklift helper tool on macOS to escalate privileges to root. The exploit demonstrates two methods: setting the SUID bit on a copied Python interpreter and installing a malicious LaunchAgent.
Description
BinaryNights ForkLift 3.x before 3.4 has a local privilege escalation vulnerability because the privileged helper tool implements an XPC interface that allows file operations to any process (copy, move, delete) as root and changing permissions.
Exploits (1)
This repository contains a working proof-of-concept exploit for CVE-2020-15349, which leverages an unauthorized XPC connection to the Forklift helper tool on macOS to escalate privileges to root. The exploit demonstrates two methods: setting the SUID bit on a copied Python interpreter and installing a malicious LaunchAgent.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H