Vulnerabilities > CVE-2018-6823 - Unspecified vulnerability in Mailbutler Shimo
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
COMPLETE Integrity impact
COMPLETE Availability impact
COMPLETE Summary
In the VPN client in Mailbutler Shimo before 4.1.5.1 on macOS, the com.feingeist.shimo.helper tool LaunchDaemon implements an unprotected XPC service that can be abused to execute scripts as root.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |