Approved changes feed: RSS · Atom

cpe:2.3:a:pritunl:pritunl-client-electron:1.2.2550.20:*:*:*:*:*:*:*

part: a version: 1.2.2550.20 update: *

VendorPritunl (2fc7ce80-b6c7-5028-9039-7e246f706f73)
ProductPritunl Client Electron (25d96dd7-2e31-5b01-aa30-8da6428cd2e1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/pritunl/pritunl-client-electron purl2cpe 2026-06-01 10:16:34.421633

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-27519 vulnerable 2026-06-08 05:23:52.757405 Details available
Pritunl Client v1.2.2550.20 contains a local privilege escalation vulnerability in the pritunl-service component. The attack vector is: malicious openvpn config. A local attacker could leverage the log and log-append along with log injection to create or append to privileged script files and execute code as root/SYSTEM.
Published: 2021-04-30T13:16:08.000Z
Updated: 2024-08-04T16:18:44.413Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.