PT-2021-11400 · Unknown+1 · Pritunl Client+1

Published 2021-04-30 · Updated 2021-05-11 · CVE-2020-27519

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Pritunl Client version 1.2.2550.20

Description: The issue concerns a local privilege escalation in the pritunl-service component. It can be exploited through a malicious OpenVPN config, allowing a local attacker to leverage log and log-append features along with log injection. This enables the creation or appending to privileged script files, resulting in the execution of code as root or SYSTEM.

Recommendations: For Pritunl Client version 1.2.2550.20, consider disabling the pritunl-service component until a patch is available to prevent potential exploitation. Restrict access to the log and log-append features to minimize the risk of log injection. Avoid using malicious OpenVPN configs to prevent the escalation of privileges. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2020-27519

Affected Products

Openvpn

Pritunl Client

References · 5

• https://github.com/pritunl/pritunl-client-electron/commit/87ceeae9b8ee415541d7d71de10675e699a76e5e#diff-5c6a264bee3576f2a147b8db70332e9a16dd43d073782cf6d32a372abb22b899 · Patch
• https://github.com/pritunl/pritunl-client-electron/commit/87ceeae9b8ee415541d7d71de10675e699a76e5e · Patch
• https://github.com/pritunl/pritunl-client-electron/commit/c0aeb159351e5e99d752c27b87133eca299bdfce · Patch
• https://osv.dev/vulnerability/CVE-2020-27519 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27519 · Security Note