Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Bitmask Riseup VPN 0.21.6 contains a local privilege escalation flaw due to improper access controls. When the software is installed with a non-default installation directory off of the system root, the installer fails to properly set ACLs. This allows lower privileged users to replace the VPN executable with a malicious one. When a higher privileged user such as an Administrator launches that executable, it is possible for the lower privileged user to escalate to Administrator privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Bitmask 权限许可和访问控制问题漏洞
Vulnerability Description
Bitmask是一个开源应用程序，可通过VPN提供简单安全的加密通信。 Bitmask Riseup VPN 中存在权限许可和访问控制问题漏洞，该漏洞源于当产品在非默认目录安装时无法正常处理ACL。攻击者可通过替换VPN可执行文件诱导高权限用户执行并获得管理员特权。以下产品及版本受到影响：Bitmask Riseup VPN 0.21.6。
CVSS Information
N/A
Vulnerability Type
N/A