CVE-2017-20107CWE-269

ShadeYouVPN.com Client privileges management

Medium · published June 28, 2022

CVSS v3.1
5.3
EPSS
0%
Percentile
21.0
In the wild
Unconfirmed
What it is

A vulnerability, which was classified as problematic, was found in ShadeYouVPN.com Client 2.0.1.11. Affected is an unknown function. The manipulation leads to improper privilege management. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.1.12 is able to address this issue. It is recommended to upgrade the affected component.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00296 · 21.0th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2022-06-28T06:40Z
EPSS history
Timeline
  • 28 JUN 06:40Z
    ShadeYouVPN.com Client privileges management
    cvelistv5