CVE-2017-2381

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "sudo" component. It allows remote authenticated users to gain privileges by leveraging membership in the admin group on a network directory server.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
appleCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
VendorProductVersion
applemac_os_x
𝑥
≤ 10.12.3
𝑥
= Vulnerable software versions
References
http://www.securityfocus.com/bid/97140
http://www.securitytracker.com/id/1038138
https://support.apple.com/HT207615
http://www.securityfocus.com/bid/97140
http://www.securitytracker.com/id/1038138
https://support.apple.com/HT207615