PT-2023-22636 · Unknown · Shimo Vpn Client

CVE-2023-30328

·

Published

2023-05-04

·

Updated

2023-05-10

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Shimo VPN Client for macOS version 5.0.4
Description An issue in the helper tool of Shimo VPN Client for macOS allows attackers to bypass authentication via PID re-use.
Recommendations For Shimo VPN Client for macOS version 5.0.4, update to a newer version that contains a fix for this issue.

Exploit

Fix

Improper Authentication

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2023-30328

Affected Products

Shimo Vpn Client