CVE-2020-27192

Name of the Vulnerable Software and Affected Versions BinaryNights ForkLift version 3.4

Description A local attacker can inject code into ForkLift due to it being compiled with the com.apple.security.cs.disable-library-validation flag enabled. This allows the attacker to run malicious code with escalated privileges through ForkLift's helper tool.

Recommendations For BinaryNights ForkLift version 3.4, consider disabling the helper tool until a patch is available to prevent malicious code injection. Restrict access to ForkLift to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.