CVE-2019-12174

CVE-2019-12174 affects macOS hide.me prior to 2.4.4. The vulnerability resides in the me_hide_vpnhelper.Helper class’s connectWithExecutablePath:configFilePath:configFileName method of the me.hide.vpnhelper macOS privilege helper, where user-supplied input can be used to escalate privileges and r...

CVE-2019-12174: Missing Authentication for Critical Function

hide.me before 2.4.4 on macOS suffers from a privilege escalation vulnerability in the connectWithExecutablePath:configFilePath:configFileName method of the mehidevpnhelper.Helper class in the me.hide.vpnhelper macOS privilege helper tool. This method takes user-supplied input and can be used to...