« Volver al listado

CVE-2024-9062

Estado: AplazadaAlta (7.8)—

The Archify application contains a local privilege escalation vulnerability due to insufficient client validation in its privileged helper tool, com.oct4pie.archifyhelper, which is exposed via XPC. Archify follows the "factored applications" model, delegating privileged operations—such as arbitrary file deletion and file permission changes—to this helper running as root. However, the helper does not verify the code signature, entitlements, or signing flags of the connecting client. Although macOS provides secure validation mechanisms like auditToken, these are not implemented. As a result, any local process can establish a connection to the helper and invoke privileged functionality, leading to unauthorized execution of actions with root-level privileges.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

AV:L PR:L sin UI permite escalada local via XPC sin validación. Impactos: obtención de sesión root (T1078.003) y modificación de permisos/archivos (T1565.001).

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

User Account ManagementThreat Intelligence ProgramRestrict File and Directory PermissionsPrivileged Account ManagementPassword PoliciesRemote Data Storage

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Oct4pie — ArchifyAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-9062",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-9062",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-06-11T13:41:01.210655Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "41c37e40-543d-43a2-b660-2fee83ea851a",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "41c37e40-543d-43a2-b660-2fee83ea851a",
      "affectedData": [
        {
          "repo": "https://github.com/Oct4Pie/archify",
          "vendor": "Archify",
          "product": "Archify",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "semver",
              "lessThanOrEqual": "1.3.1"
            }
          ],
          "platforms": [
            "MacOS"
          ],
          "packageName": "com.oct4pie.archifyhelper",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-06-11T00:15:24.043",
  "references": [
    {
      "url": "https://pentraze.com/",
      "source": "41c37e40-543d-43a2-b660-2fee83ea851a"
    },
    {
      "url": "https://pentraze.com/vulnerability-reports/",
      "source": "41c37e40-543d-43a2-b660-2fee83ea851a"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "41c37e40-543d-43a2-b660-2fee83ea851a",
      "description": [
        {
          "lang": "en",
          "value": "CWE-306"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Archify application contains a local privilege escalation vulnerability due to insufficient client validation in its privileged helper tool, com.oct4pie.archifyhelper, which is exposed via XPC. Archify follows the \"factored applications\" model, delegating privileged operations—such as arbitrary file deletion and file permission changes—to this helper running as root. However, the helper does not verify the code signature, entitlements, or signing flags of the connecting client. Although macOS provides secure validation mechanisms like auditToken, these are not implemented. As a result, any local process can establish a connection to the helper and invoke privileged functionality, leading to unauthorized execution of actions with root-level privileges."
    },
    {
      "lang": "es",
      "value": "La aplicación Archify contiene una vulnerabilidad de escalada de privilegios local debido a una validación insuficiente del cliente en su herramienta auxiliar privilegiada, com.oct4pie.archifyhelper, expuesta mediante XPC. Archify sigue el modelo de \"aplicaciones factorizadas\", delegando operaciones privilegiadas (como la eliminación arbitraria de archivos y la modificación de permisos) a esta herramienta auxiliar que se ejecuta como root. Sin embargo, esta herramienta no verifica la firma del código, los derechos ni los indicadores de firma del cliente que se conecta. Aunque macOS ofrece mecanismos de validación seguros como auditToken, estos no están implementados. Como resultado, cualquier proceso local puede establecer una conexión con la herramienta auxiliar e invocar funciones privilegiadas, lo que provoca la ejecución no autorizada de acciones con privilegios de root."
    }
  ],
  "lastModified": "2026-06-17T08:23:52.740",
  "sourceIdentifier": "41c37e40-543d-43a2-b660-2fee83ea851a"
}