CVE-2022-27904

HIGH

Automox Agent for macOS < 39 - Time-of-check Time-of-use Race Condition during Install

Title source: llm
STIX 2.1

Description

Automox Agent for macOS before version 39 was vulnerable to a time-of-check/time-of-use (TOCTOU) race-condition attack during the agent install process.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_misc
https://automox.com
Vendor Advisory x_refsource_misc
https://www.automox.com/security/security-bulletin

Scores

CVSS v3 7.0
EPSS 0.0016
EPSS Percentile 5.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-367
Status published
Products (1)
automox/automox < 39
Published Jul 01, 2022
Tracked Since Feb 18, 2026