CVE-2015-1130CISA KEV: Actively Exploited

Apple OS X Authentication Bypass Vulnerability

Published Feb 10, 2022·Updated Feb 10, 2022

Description

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges.

PoC: RootPipeTester

RootPipe (CVE-2015-1130) and Phoenix (CVE-2015-3673) vulnerability testing utility for Mac OS X 10.2.8 and later

PoC: RootPipe-Demo

Proof of Concept OS X Application for RootPipe Privilege Escalation Vulnerability (CVE-2015-1130)

Get alerted for CVEs like this