An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can pass a PID and receive information running on it that would usually only be accessible to the root user.
References
Link | Resource |
---|---|
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0726 | Third Party Advisory |
Configurations
Information
Published : 2019-04-02 09:29
Updated : 2022-06-07 10:19
NVD link : CVE-2018-4052
Mitre link : CVE-2018-4052
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
gog
- galaxy