CVE-2018-6823

2018-02-0716:00:00

mitre

www.cve.org

cve-2018-6823

macos

xpc service

root access

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

60.6%

JSON

In the VPN client in Mailbutler Shimo before 4.1.5.1 on macOS, the com.feingeist.shimo.helper tool LaunchDaemon implements an unprotected XPC service that can be abused to execute scripts as root.

References

github.com/VerSprite/research/blob/master/advisories/VS-2018-001.md