PT-2018-17758 · Purevpn · Purevpn

Benjamin Watson + 1 · Published 2018-02-07 · Updated 2020-05-11 · CVE-2018-6822

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PureVPN version 6.0.1

Description The issue concerns an unprotected XPC service in the HelperTool LaunchDaemon of PureVPN on macOS. This unprotected service can be exploited to execute system commands with root privileges.

Recommendations For PureVPN version 6.0.1, consider disabling the HelperTool LaunchDaemon until a patch is available to prevent potential exploitation.

Fix

Related Identifiers

CVE-2018-6822

Affected Products

Purevpn

References · 3

• https://osv.dev/vulnerability/CVE-2018-6822 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-6822 · Security Note
• https://github.com/VerSprite/research/blob/master/advisories/VS-2018-002.md · Note