PT-2021-9734 · Unknown · Privatetunnel

Published 2021-05-26 · Updated 2021-06-02 · CVE-2020-15076

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Private Tunnel version 3.0.1 and older

Description The issue may cause corruption of system critical files due to the installer accessing files via symlinks in /tmp that it should not have access to.

Recommendations For Private Tunnel version 3.0.1 and older, update to a newer version to prevent the corruption of system critical files.

Fix

Link Following

Weakness Enumeration

CWE-61

CWE-59

Related Identifiers

CVE-2020-15076

Affected Products

Privatetunnel

References · 3

• https://swupdate.openvpn.net/downloads/privatetunnel/changelog.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15076 · Security Note
• https://osv.dev/vulnerability/CVE-2020-15076 · Vendor Advisory