PT-2019-16070 · Proxyman · Proxyman

Publicado 2019-12-29 · Atualizado 2020-06-13 · CVE-2019-20057

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Proxyman for macOS versions 1.11.0 and earlier

Description The issue allows an attacker to change the System Proxy and redirect all traffic to an attacker-controlled computer, enabling man-in-the-middle (MITM) attacks.

Recommendations For versions 1.11.0 and earlier, update to a version later than 1.11.0 to resolve the issue.

Correção

Insufficient Verification of Data Authenticity

Enumeração de Fraquezas

CWE-345

Identificadores relacionados

CVE-2019-20057

Produtos afetados

Proxyman

Referências · 4

• https://github.com/ProxymanApp/Proxyman/issues/364 · Nota
• https://osv.dev/vulnerability/CVE-2019-20057 · Aviso do Fabricante
• https://t.me/cybersecuritytechnologies/1258 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-20057 · Nota de Segurança