Security Advisory

CVE-2018-4004

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-04-17 14:15:43
Last updated 2024-08-05 04:57:24
Assigner talos
State PUBLISHED

Description

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the disconnectService functionality. A non-root user is able to kill any privileged process on the system. An attacker would need local access to the machine for a successful exploit.