← Back to CVE List

CVE-2018-6823

Published: 2018-02-07T16:29Z
Last Modified: 2024-11-21T04:11Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
In the VPN client in Mailbutler Shimo before 4.1.5.1 on macOS, the com.feingeist.shimo.helper tool LaunchDaemon implements an unprotected XPC service that can be abused to execute scripts as root. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt