CVE-2019-12174

N/A

Descricao

hide.me before 2.4.4 on macOS suffers from a privilege escalation vulnerability in the connectWithExecutablePath:configFilePath:configFileName method of the me_hide_vpnhelper.Helper class in the me.hide.vpnhelper macOS privilege helper tool. This method takes user-supplied input and can be used to escalate privileges, as well as obtain the ability to run any application on the system in the root context.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado7/8/2019

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

hide:hide.me

Fraquezas (CWE)

CWE-306

Referencias

https://drive.google.com/open?id=1TwbjmE45gnWeYpFyH8kDU63P7u4IdPd2(cve@mitre.org)

https://drive.google.com/open?id=1TwbjmE45gnWeYpFyH8kDU63P7u4IdPd2(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.