CVE-2020-15076

CVE-2020-15076

Vendor N/A

Product Private Tunnel

Weakness CWE-61

Published May 26, 2021

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Private Tunnel installer for macOS version 3.0.1 and older versions may corrupt system critical files it should not have access via symlinks in /tmp.

Key dates

02Disclosure timeline

May 26, 2021 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-15076 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/61.html

Related vulnerabilities

04Related CVE

CVE-2024-52537 CVE-2021-1145 Cisco StarOS for Cisco ASR 5000 Series Routers Arbitrary File Read Vulnerability CVE-2026-35525 LiquidJS has a root restriction bypass for partial and layout loading through symlinked templates CVE-2025-36564 CVE-2026-41579 runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations