CVE-2018-18858

CVE-2018-18858 describes multiple local privilege escalation flaws in the LiquidVPN for macOS client (up to v1.37). The issue arises because com.smr.liquidvpn.OVPNHelper uses the system function to execute the path in a shell command, enabling an unprotected XPC service to run arbitrary OS comman...

LiquidVPN 1.36 / 1.37 - Privilege Escalation

/ ======================================================================= Title: Multiple Privilege Escalation Vulnerabilities Product: LiquidVPN for MacOS Vulnerable versions: 1.37, 1.36 and earlier CVE IDs: CVE-2018-18856, CVE-2018-18857, CVE-2018-18858, CVE-2018-18859 Impact: Critical Homepage...

LiquidVPN 1.36 1.37 - Privilege Escalation

LiquidVPN 1.36 1.37 - Privilege Escalation / ======================================================================= Title: Multiple Privilege Escalation Vulnerabilities Product: LiquidVPN for MacOS Vulnerable versions: 1.37, 1.36 and earlier CVE IDs: CVE-2018-18856, CVE-2018-18857, CVE-2018-1885...

LiquidVPN For macOS 1.3.7 Privilege Escalation

======================================================================= Title: Multiple Privilege Escalation Vulnerabilities Product: LiquidVPN for MacOS Vulnerable versions: 1.37, 1.36 and earlier CVE IDs: CVE-2018-18856, CVE-2018-18857, CVE-2018-18858, CVE-2018-18859 Impact: Critical Homepage:...