CVE-2020-7376 - Rapid7 Metasploit Framework Relative Path Traversal in enum_osx module

Back Back to CVE browser

CRITICAL

Rapid7 Metasploit Framework Relative Path Traversal in enum_osx module

Published Aug 24, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 1.12%

Description

The Metasploit Framework module "post/osx/gather/enum_osx module" is affected by a relative path traversal vulnerability in the get_keychains method which can be exploited to write arbitrary files to arbitrary locations on the host filesystem when the module is run on a malicious host.

Affected products

Vendor Rapid7 Product Metasploit Framework Default
unknown
Affected
- ≥ 4.11.7, < 4.11.7*
- ≥ 6.0.3, < 6.0.3

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Rapid7	Metasploit Framework	unknown	Affected ≥ 4.11.7, < 4.11.7* ≥ 6.0.3, < 6.0.3

Remediation

Vendor solution

Users should update to version 6.0.3 or later of the Metasploit Framework.

Weaknesses (2)

CWE-22

Path Traversal

CWE-23

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28503
Advisory
https://github.com/rapid7/metasploit-framework/issues/14008
x_refsource_CONFIRMExploitPatchThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28503		Advisory
https://github.com/rapid7/metasploit-framework/issues/14008		x_refsource_CONFIRMExploitPatchThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner rapid7

Published Aug 24, 2020

Updated Sep 16, 2024

Reserved Jan 21, 2020

Link CVE-2020-7376

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-7376

Red Hat

No data

ENISA EUVD

Assigner rapid7

Published Aug 24, 2020

Updated Sep 16, 2024

Link EUVD-2020-28503

GitHub

No data