Description (CNA)
AirVPN Eddie on MacOS contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root.This issue affects Eddie: 2.24.6.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AirVPN / Eddie | affected 2.24.6 |
CWE
CWE-732
References
- https://fluidattacks.com/advisories/blink182
- https://eddie.website/
- https://github.com/AirVPN/Eddie
- https://airvpn.org/forums/topic/79305-eddie-desktop-edition-225-beta-released/
ADP enrichment
No English description supplied.
No references supplied.