Description (CNA)
A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a local attacker to leverage a race condition and symlink manipulation to achieve privileged file corruption.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| X-VPN / X-VPN macOS website | affected 77.0 through 77.5 |
CWE
CWE-367
References
- https://fluidattacks.com/es/advisories/soad
- https://xvpn.io/resources/statement-local-privilege-escalation-vulnerability
- https://xvpn.io/download/vpn-mac
- https://xvpn.io/
ADP enrichment
No English description supplied.