A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to gain root privileges.
During installation, installed file permissions are set to allow anyone to modify those files.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mac_os_x | Apple | 10.13 (including) | 10.13.6 (excluding) |
| Mac_os_x | Apple | 10.14 (including) | 10.14.6 (excluding) |
| Mac_os_x | Apple | 10.15 (including) | 10.15.5 (excluding) |
| Mac_os_x | Apple | 10.13.6 (including) | 10.13.6 (including) |
| Mac_os_x | Apple | 10.13.6-security_update_2018-002 (including) | 10.13.6-security_update_2018-002 (including) |
| Mac_os_x | Apple | 10.13.6-security_update_2018-003 (including) | 10.13.6-security_update_2018-003 (including) |
| Mac_os_x | Apple | 10.13.6-security_update_2019-001 (including) | 10.13.6-security_update_2019-001 (including) |
| Mac_os_x | Apple | 10.13.6-security_update_2019-002 (including) | 10.13.6-security_update_2019-002 (including) |
| Mac_os_x | Apple | 10.13.6-security_update_2019-003 (including) | 10.13.6-security_update_2019-003 (including) |
| Mac_os_x | Apple | 10.13.6-security_update_2019-004 (including) | 10.13.6-security_update_2019-004 (including) |
| Mac_os_x | Apple | 10.13.6-security_update_2019-005 (including) | 10.13.6-security_update_2019-005 (including) |
| Mac_os_x | Apple | 10.13.6-security_update_2019-006 (including) | 10.13.6-security_update_2019-006 (including) |
| Mac_os_x | Apple | 10.13.6-security_update_2019-007 (including) | 10.13.6-security_update_2019-007 (including) |
| Mac_os_x | Apple | 10.13.6-security_update_2020-001 (including) | 10.13.6-security_update_2020-001 (including) |
| Mac_os_x | Apple | 10.13.6-security_update_2020-002 (including) | 10.13.6-security_update_2020-002 (including) |
| Mac_os_x | Apple | 10.14.6 (including) | 10.14.6 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2019-001 (including) | 10.14.6-security_update_2019-001 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2019-002 (including) | 10.14.6-security_update_2019-002 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2019-004 (including) | 10.14.6-security_update_2019-004 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2019-005 (including) | 10.14.6-security_update_2019-005 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2019-006 (including) | 10.14.6-security_update_2019-006 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2019-007 (including) | 10.14.6-security_update_2019-007 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2020-001 (including) | 10.14.6-security_update_2020-001 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2020-002 (including) | 10.14.6-security_update_2020-002 (including) |