Vulnerabilities > CVE-2018-6823 - Unspecified vulnerability in Mailbutler Shimo
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
In the VPN client in Mailbutler Shimo before 4.1.5.1 on macOS, the com.feingeist.shimo.helper tool LaunchDaemon implements an unprotected XPC service that can be abused to execute scripts as root.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |