PT-2018-17758 · Purevpn · Purevpn

Benjamin Watson + 1 · Publicado 2018-02-07 · Atualizado 2020-05-11 · CVE-2018-6822

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PureVPN version 6.0.1

Description The issue concerns an unprotected XPC service in the HelperTool LaunchDaemon of PureVPN on macOS. This unprotected service can be exploited to execute system commands with root privileges.

Recommendations For PureVPN version 6.0.1, consider disabling the HelperTool LaunchDaemon until a patch is available to prevent potential exploitation.

Correção

Identificadores relacionados

CVE-2018-6822

Produtos afetados

Purevpn

Referências · 3

• https://github.com/VerSprite/research/blob/master/advisories/VS-2018-002.md · Nota
• https://osv.dev/vulnerability/CVE-2018-6822 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-6822 · Nota de Segurança