critical9.8
CVE-2018-6822
In PureVPN 6.0.1 on macOS, HelperTool LaunchDaemon implements an unprotected XPC service that can be abused to execute system commands as root.
Impact
In PureVPN 6.0.1 on macOS, HelperTool LaunchDaemon implements an unprotected XPC service that can be abused to execute system commands as root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Purevpn | Purevpn | before 6.0.1 |