description: Little Snitch version 4.5.1 and older changed ownership of a directory path controlled by the user. This allowed the user to escalate to root by linking the path to a directory containing code executed by root.
problem types: CWE-59: Improper Link Resolution Before File Access ('Link Following')
affected:
{
product: Little Snitch
vendor: n/a
versions:
status: affected, version: up to 4.5.1
}