PT-2018-17758

CVE-2018-6822

·

Published

2018-02-07

·

Updated

2020-05-11

Description by

CVSS 3.1
10
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PureVPN version 6.0.1
Description The issue concerns an unprotected XPC service in the HelperTool LaunchDaemon of PureVPN on macOS. This unprotected service can be exploited to execute system commands with root privileges.
Recommendations For PureVPN version 6.0.1, consider disabling the HelperTool LaunchDaemon until a patch is available to prevent potential exploitation.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2018-6822
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com