CVE-2020-15076 - Private Tunnel installer for macOS version 3.0.1 and older versions may corrupt system critical files it should not have access via symlinks in /tmp

HIGH

Private Tunnel installer for macOS version 3.0.1 and older versions may corrupt system critical files it should not have access via symlinks in /tmp

Published May 26, 2021

7.8

HIGH

CVSS 3.1

EPSS 0.36%

Private Tunnel installer for macOS version 3.0.1 and older versions may corrupt system critical files it should not have access via symlinks in /tmp.

Vendor n/a Product Private Tunnel Default
unknown
Affected
- 3.0.1 and prior versions

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Private Tunnel	unknown	Affected 3.0.1 and prior versions

No remediation recorded yet.

Weaknesses (2)

CWE-59

CWE-61

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7204		Advisory
https://swupdate.openvpn.net/downloads/privatetunnel/changelog.txt		x_refsource_MISCRelease NotesVendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner OpenVPN

Published May 26, 2021

Updated Aug 4, 2024

Reserved Jun 25, 2020

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner OpenVPN

Published May 26, 2021

Updated Aug 4, 2024

GitHub

No data