PT-2022-7980 · Unknown · Shadeyouvpn.Com Client

Kacper Szurek · Published 2022-06-28 · Updated 2022-07-11 · CVE-2017-20107

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ShadeYouVPN.com Client version 2.0.1.11

Description A problematic issue was found, leading to improper privilege management. Local access is required to approach this attack. The issue has been disclosed to the public.

Recommendations For ShadeYouVPN.com Client version 2.0.1.11, upgrade to version 2.0.1.12 to address this issue.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2017-20107

Affected Products

Shadeyouvpn.Com Client

References · 5

• 🔥 http://seclists.org/fulldisclosure/2017/Feb/28 · Exploit
• https://osv.dev/vulnerability/CVE-2017-20107 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-20107 · Security Note
• https://t.me/cvenotify/32278 · Telegram Post
• https://vuldb.com/?id.97122 · Note