Pritunl Client v1.2.2550.20 contains a local privilege escalation vulnerability in the pritunl-service component. The attack vector is: malicious openvpn config. A local attacker could leverage the log and log-append along with log injection to create or append to privileged script files and execute code as root/SYSTEM.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-04-30T13:16:08
Updated: 2024-08-04T16:18:44.413Z
Reserved: 2020-10-21T00:00:00
Link: CVE-2020-27519
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-04-30T14:15:08.163
Modified: 2024-11-21T05:21:18.930
Link: CVE-2020-27519
Redhat
No data.