PT-2018-17759 · Feingeist · Mailbutler Shimo

Benjamin Watson + 1 · Publicado 2018-02-07 · Atualizado 2020-05-11 · CVE-2018-6823

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mailbutler Shimo versions prior to 4.1.5.1

Description The issue concerns an unprotected XPC service in the com.feingeist.shimo.helper tool LaunchDaemon, which can be exploited to execute scripts as root.

Recommendations For Mailbutler Shimo versions prior to 4.1.5.1, update to version 4.1.5.1 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2018-6823

Produtos afetados

Mailbutler Shimo

Referências · 3

• https://github.com/VerSprite/research/blob/master/advisories/VS-2018-001.md · Nota
• https://osv.dev/vulnerability/CVE-2018-6823 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-6823 · Nota de Segurança