CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Permissions Privileges and Access Controls
Summary: hide.me before 2.4.4 on macos suffers from a privilege escalation vulnerability in the connectwithexecutablepath:configfilepath:configfilename method of the me_hide_vpnhelper.helper class in the me.hide.vpnhelper macos privilege helper tool. this method takes user-supplied input and can be used to escalate privileges, as well as obtain the ability to run any application on the system in the root context.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-07-08
Last Modified Date: 2019-07-09