PT-2022-7985

CVE-2017-20112

·

Published

2022-06-29

·

Updated

2022-07-07

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions IVPN Client version 2.6.6120.33863
Description A critical issue has been found in the IVPN Client, affecting an unknown functionality. The manipulation of the argument --up cmd leads to improper privilege management. This issue can be exploited locally.
Recommendations For IVPN Client version 2.6.6120.33863, upgrade to version 2.6.2 to address this issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-269: Improper Privilege Management
Related identifiers
CVE-2017-20112
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com