CVE Catalog
CVE-2021-36666
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.45%
36th percentile - higher than 36% of all known CVEs
Summary
An issue was discovered in Druva 6.9.0 for macOS that allows attackers to gain escalated local privileges via the inSyncDecommission component.
Risk Assessment
An attacker with local access can escalate privileges, potentially leading to full system compromise or sensitive data theft.
Recommendation
Immediately update Druva to the latest version that fixes this vulnerability and restrict local access to the system.
Other vulnerabilities in Druva
Original NVD description (English source)
An issue was discovered in Druva 6.9.0 for MacOS, allows attackers to gain escalated local privileges via the inSyncDecommission.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS