CVE-2018-10204

PureVPN 6.0.1 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "sevpnclient" service. When configured to use the OpenVPN protocol, the "sevpnclient" service executes "openvpn.exe" using the OpenVPN config file located at %PROGRAMDATA%\purevpn\config\config.ovpn. This fi...

CVE-2018-10204

CVE-2018-10204 affects PureVPN 6.0.1 for Windows, via the sevpnclient service when using the OpenVPN protocol. The OpenVPN config at %PROGRAMDATA%\purevpn\config\config.ovpn has write permissions for the Everyone group. An authenticated attacker can modify this file to specify a dynamic library p...

PT-2018-9750

Name of the Vulnerable Software and Affected Versions: PureVPN version 6.0.1 Description: The issue concerns a privilege escalation in the sevpnclient service when using the OpenVPN protocol. The service executes openvpn.exe with a config file located at %PROGRAMDATA%purevpnconfigconfig.ovpn, whi...

CVE-2018-10204: Incorrect Permission Assignment for Critical Resource

PureVPN 6.0.1 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "sevpnclient" service. When configured to use the OpenVPN protocol, the "sevpnclient" service executes "openvpn.exe" using the OpenVPN config file located at %PROGRAMDATA%\purevpn\config\config.ovpn. This fi...