Privilege escalation

2018-03-1618:29:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.4%

JSON

VPN Unlimited 4.2.0 for macOS suffers from a root privilege escalation vulnerability in its privileged helper tool. The privileged helper tool implements an XPC interface, which allows arbitrary applications to execute system commands as root.

CPENameOperatorVersion
vpn_unlimitedlt4.2.0

CPE	Name	Operator	Version
	vpn_unlimited	lt	4.2.0

References

github.com/VerSprite/research/blob/master/advisories/VS-2018-014.md