PT-2018-17758
CVE-2018-6822
·
Publicado
2018-02-07
·
Atualizado
2020-05-11
Descrição por
CVSS 3.1
10
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
PureVPN version 6.0.1
Description
The issue concerns an unprotected XPC service in the HelperTool LaunchDaemon of PureVPN on macOS. This unprotected service can be exploited to execute system commands with root privileges.
Recommendations
For PureVPN version 6.0.1, consider disabling the HelperTool LaunchDaemon until a patch is available to prevent potential exploitation.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾