vendor:
macOS
by:
Project Zero
8.8
CVSS
HIGH
Directory Traversal
22
CWE
Product Name: macOS
Affected Version From: XNU
Affected Version To: XNU
Patch Exists: YES
Related CWE: CVE-2020-9950
CPE: o:apple:mac_os_x
Other Scripts:
N/A
Platforms Tested: macOS
2020
checkdirs() Vulnerability in XNU
When a new mount point is created in XNU, the kernel uses checkdirs() to scan all active processes to see if any of them have a current or root directory onto which the new filesystem has just been mounted. If so, replace them with the new mount point. This can be exploited by an attacker to traverse directories and gain access to sensitive information.
Mitigation:
Apply the latest security patches and updates to the system.