Advisory ROSA-SA-2021-1945

Software: pango 1.42.4 OS: Cobalt 7.9 CVE-ID: CVE-2020-17365 CVE-Crit: HIGH CVE-DESC: Incorrect directory permissions in the Hotspot Shield VPN client software for Windows 10.3.0 and earlier could allow an authorized user to potentially enable privilege escalation via local access. The...

CVE-2020-17365

Improper directory permissions in the Hotspot Shield VPN client software for Windows 10.3.0 and earlier may allow an authorized user to potentially enable escalation of privilege via local access. The vulnerability allows a local user to corrupt system files: a local user can create a specially...

CVE-2020-17365

CVE-2020-17365 affects the Hotspot Shield VPN client for Windows 10.3.0 and earlier. The issue is improper directory permissions that allow a local user to escalate privileges by creating a crafted symbolic link to a critical system file and overwriting it with the application’s privileges. Explo...