Description (CNA)
IXON VPN Client before 1.4.4 on Linux and macOS allows Local Privilege Escalation to root because there is code execution from a configuration file that can be controlled by a low-privileged user. There is a race condition in which a temporary configuration file, in a world-writable directory, can be overwritten.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IXON / VPN Client | affected 0 before 1.4.4 |
CWE
CWE-732
References
- https://support.ixon.cloud/s/article/VPN-Client-installation-and-uninstallation
- https://ixon-cloud.my.salesforce.com/sfc/p/#1t000000vlSF/a/TX000000DQmH/WRGwuYg2iMsKX6NAIK3MygCUOlg0SPQ..YvGWrwfNeM
ADP enrichment
No English description supplied.
No references supplied.