Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A local privilege escalation vulnerability exists in the InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 for macOS. The service accepts unauthenticated XPC connections and executes input via system(), which may allow a local user to execute arbitrary commands with root privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Plugin Alliance Installation Manager 安全漏洞
Vulnerability Description
Plugin Alliance Installation Manager是美国Plugin Alliance公司的一个插件管理器。 Plugin Alliance Installation Manager v1.4.0版本存在安全漏洞,该漏洞源于InstallationHelper服务接受未经验证的XPC连接,可能导致本地用户执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A