CVEvulnerability
CVE-2020-25989
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-11-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-59
Description
Privilege escalation via arbitrary file write in pritunl electron client 1.0.1116.6 through v1.2.2550.20. Successful exploitation of the issue may allow an attacker to execute code on the effected system with root privileges.
Affected configurations
• pritunl pritunl-client-electron (>= 1.0.1116.6 <= 1.2.2550.20)
Related
Weakness · CWE (1)
- CWE-59 Improper Link Resolution Before File Access weakness
References
- https://github.com/pritunl/pritunl-client-electron/commit/89f8c997c6f93e724f68f76f7f47f8891d9acc2d Patch, Third Party Advisory
- https://vkas-afk.github.io/vuln-disclosures/ Exploit, Third Party Advisory
- https://github.com/pritunl/pritunl-client-electron/commit/89f8c997c6f93e724f68f76f7f47f8891d9acc2d Patch, Third Party Advisory
- https://vkas-afk.github.io/vuln-disclosures/ Exploit, Third Party Advisory