Read the docs

Mailbutler

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Mailbutler records in CISA KEV

No Mailbutler vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Shimo · all components

Priority MEDIUM 45

In the VPN client in Mailbutler Shimo before 4.1.5.1 on macOS, the com.feingeist.shimo.helper tool LaunchDaemon implements an unprotected XPC service that can be abused to execute scripts as root.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01483 Published 2018-02-07 No fix listed
Open these records in search →