Description
A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a local attacker to leverage a race condition and symlink manipulation to achieve privileged file corruption.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| X-VPN | X-VPN macOS website | 77.0 – ≤ 77.5 | — |
References
- https://fluidattacks.com/es/advisories/soad third-party-advisory
- https://xvpn.io/resources/statement-local-privilege-escalation-vulnerability vendor-advisory
- https://xvpn.io/download/vpn-mac patch
- https://xvpn.io/ product