| 제목 | alaneuler batteryKid v2.1 Missing Authentication for Critical Function |
|---|
| 설명 | batteryKid for macOS up to 2,1 registers a root-privileged XPC helper (me.alaneuler.batteryKid.PrivilegeHelper) that unconditionally accepts incoming connections without client validation. The helper exposes methods to read and write System Management Controller (SMC) keys, allowing any local process to invoke privileged hardware operations. |
|---|
| 원천 | ⚠️ https://github.com/SwayZGl1tZyyy/n-days/blob/main/batteryKid/README.md |
|---|
| 사용자 | SwayZGl1tZyyy (UID 88771) |
|---|
| 제출 | 2025. 08. 25. PM 08:03 (8 개월 ago) |
|---|
| 모더레이션 | 2025. 09. 01. PM 11:06 (7 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 322142 [alaneuler batteryKid 까지 2.1 켜짐 macOS NSXPCListener PrivilegeHelper.swift 약한 인증] |
|---|
| 포인트들 | 18 |
|---|