high8.8
CVE-2020-13095
Little Snitch version 4.5.1 and older changed ownership of a directory path controlled by the user.
Impact
Little Snitch version 4.5.1 and older changed ownership of a directory path controlled by the user. This allowed the user to escalate to root by linking the path to a directory containing code executed by root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Obdev | Little Snitch | through 4.5.1 |