SaferVPN for Windows Ver 5.0.3.3 through 5.0.4.15 could allow local privilege escalation from low privileged users to SYSTEM via a crafted openssl configuration file. This issue is similar to CVE-2019-12572.
References
| Link | Resource |
|---|---|
| https://thebinary0x1.medium.com/cve-2020-26050-safervpn-for-windows-local-privilege-escalation-da069bb1373c | Exploit Third Party Advisory |
| https://vimeo.com/459654003 | Exploit Third Party Advisory |
| https://www.safervpn.com/blog/updates-to-the-safervpn-windows-application/ | Release Notes Vendor Advisory |
| https://thebinary0x1.medium.com/cve-2020-26050-safervpn-for-windows-local-privilege-escalation-da069bb1373c | Exploit Third Party Advisory |
| https://vimeo.com/459654003 | Exploit Third Party Advisory |
| https://www.safervpn.com/blog/updates-to-the-safervpn-windows-application/ | Release Notes Vendor Advisory |
Configurations
History
21 Nov 2024, 05:19
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://thebinary0x1.medium.com/cve-2020-26050-safervpn-for-windows-local-privilege-escalation-da069bb1373c - Exploit, Third Party Advisory | |
| References | () https://vimeo.com/459654003 - Exploit, Third Party Advisory | |
| References | () https://www.safervpn.com/blog/updates-to-the-safervpn-windows-application/ - Release Notes, Vendor Advisory |
Information
Published : 2021-01-12 03:15
Updated : 2024-11-21 05:19
NVD link : CVE-2020-26050
Mitre link : CVE-2020-26050
CVE.ORG link : CVE-2020-26050
JSON object : View
Products Affected
safervpn
- safervpn
CWE
CWE-427
Uncontrolled Search Path Element