CVE-2018-6823

CVE-2018-6823 affects the Mailbutler Shimo VPN client on macOS prior to version 4.1.5.1. The vulnerability stems from the com.feingeist.shimo.helper LaunchDaemon exposing an unprotected XPC service, which can be abused to execute scripts as root. Impact is high: root-level script execution with f...

CVE-2023-30328

CVE-2023-30328 describes an authentication bypass in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4. The root cause is a PID reuse issue in the helper, enabling attackers to bypass authentication. The vulnerability is rated CVSS v3.1 with base score 9.8 (CRITICAL), affecting...