PT-2021-9734

CVE-2020-15076

·

Published

2021-05-26

·

Updated

2021-06-02

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Private Tunnel version 3.0.1 and older
Description The issue may cause corruption of system critical files due to the installer accessing files via symlinks in /tmp that it should not have access to.
Recommendations For Private Tunnel version 3.0.1 and older, update to a newer version to prevent the corruption of system critical files.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-61: UNIX Symbolic Link (Symlink) Following
CWE-59: Improper Link Resolution Before File Access (\'Link Following\')
Related identifiers
CVE-2020-15076
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com