Lucene search
MitreCVE-2023-30328HistoryMay 04, 2023 - 9:15 p.m.
CVE-2023-30328
2023-05-0421:15:11
CWE-287
mitre
web.nvd.nist.gov
29
mailbutler
shimo vpn
macos
v5.0.4
cve-2023-30328
authentication bypass
pid re-use
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.3
Confidence
High
EPSS
0.004
Percentile
71.9%
An issue in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4 allows attackers to bypass authentication via PID re-use.
Affected configurations
Node
mailbutlershimoMatch5.0.4macos
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mailbutler | shimo | 5.0.4 | cpe:2.3:a:mailbutler:shimo:5.0.4:*:*:*:*:macos:*:* |
Related
cvelist
cvelist
CVE-2023-30328
2023-05-04 00:00:00
prion
prion
Authentication flaw
2023-05-04 21:15:00
nvd
nvd
CVE-2023-30328
2023-05-04 21:15:11
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.3
Confidence
High
EPSS
0.004
Percentile
71.9%
Related for CVE-2023-30328