CNNVD-202512-070 Information

CNNVD ID

CNNVD-202512-070

CVE-2025-57489

  • CNNVD Published: 2025-12-01

Description (Chinese)

Shirt Pocket SuperDuper!是Shirt Pocket公司的一个macOS系统中的数据备份、磁盘克隆和恢复工具。 Shirt Pocket SuperDuper! v3.10版本存在安全漏洞,该漏洞源于SDAgent组件访问控制不当,可能导致权限提升至root。

Description (English)

Shirt Pocket SuperDuper! is a data backup, disk cloning and recovery tool in a MacOS system of Shirt Pocket. There is a security loophole in version Shirt Pocket SuperDuper! v3.10 which stems from inadequate access control of the SDAgent component, which may result in the extension of access to root.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Shirt Pocket

Published

2025-12-01

Last Modified

2026-02-24

References

http://shirt.com https://shirt-pocket.com/SuperDuper/SuperDuperDescription.html https://www.shirtpocket.com/blog/index.php/shadedgrey/comments/superduper_security_update_v311/ https://access.redhat.com/security/cve/cve-2025-57489

Patch

https://www.shirt-pocket.com/SuperDuper/SuperDuperDescription.html

Share on: