Description
In the VPN client in Mailbutler Shimo before 4.1.5.1 on macOS, the com.feingeist.shimo.helper tool LaunchDaemon implements an unprotected XPC service that can be abused to execute scripts as root.
Unscored
CVE-2018-6823
EUVD-2018-18570GHSA-4gr9-9jg7-33hm
In the VPN client in Mailbutler Shimo before 4.1.5.1 on macOS, the com.feingeist.shimo.helper tool LaunchDaemon implements an unprotected X…
Published Feb 7, 2018 · Updated Sep 17, 2024 · Assigned by mitre