high7.8Public exploit code
CVE-2017-15918
Sera 1.2 stores the user's login password in plain text in their home directory.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sera 1.2 - Local Privilege Escalation / Password Disclosure2017-12-06 · local · macos
Impact
Sera 1.2 stores the user's login password in plain text in their home directory. This makes privilege escalation trivial and also exposes the user and system keychains to local attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ignitum | Sera | Version 1.2 |