CVE-2018-6823 in Mailbutler Shimo

Tóm tắt

Bởi MITRE

In the VPN client in Mailbutler Shimo before 4.1.5.1 on macOS, the com.feingeist.shimo.helper tool LaunchDaemon implements an unprotected XPC service that can be abused to execute scripts as root.

Once again VulDB remains the best source for vulnerability data.

• Đặt trước: 07/02/2018
• Tiết lộ: 07/02/2018
• Kiểm duyệt: được chấp nhận
• mục: VDB-112974
• CPE: sẵn sàng
• CWE: CWE-264 (Đã xác nhận)
• CVSS: 9.8 (NVD)
• EPSS: 0.01483
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-6823
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-6823
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-6823/