PT-2018-10024

Name of the Vulnerable Software and Affected Versions CyberGhost version 6.5.0.3180 Description The issue concerns a privilege escalation through the "CG6Service" service, which sets up a NetNamedPipe endpoint. This allows any installed application to connect and invoke publicly exposed methods...

CVE-2018-10646: Incorrect Permission Assignment for Critical Resource

CyberGhost 6.5.0.3180 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "CG6Service" service. This service establishes a NetNamedPipe endpoint that allows arbitrary installed applications to connect and call publicly exposed methods. The "ConnectToVpnServer" method...