CVE-2019-20057
Last modified
CVE-2019-20057 is a low-severity vulnerability rated 3.7/10 on the CVSS scale. com.proxyman.NSProxy.HelperTool in Privileged Helper Tool in Proxyman for macOS 1.11.0 and earlier allows an attacker to change the System Proxy and redirect all traffic to an attacker-controlled computer, enabling MITM attacks.. EPSS estimates a 0.43% chance of exploitation in the next 30 days.
Description
com.proxyman.NSProxy.HelperTool in Privileged Helper Tool in Proxyman for macOS 1.11.0 and earlier allows an attacker to change the System Proxy and redirect all traffic to an attacker-controlled computer, enabling MITM attacks.
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Proxyman | Proxyman | <= 1.11.0 |
References
- https://github.com/ProxymanApp/Proxyman/issues/364Third Party Advisory
- https://github.com/ProxymanApp/Proxyman/issues/364Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-20057?
How severe is CVE-2019-20057?
How do I fix CVE-2019-20057?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-20051A floating-point exception was discovered in PackLinuxElf::e…5.5
- CVE-2019-20052A memory leak was discovered in Mat_VarCalloc in mat.c in ma…6.5
- CVE-2019-20053An invalid memory address dereference was discovered in the …5.5
- CVE-2019-20054In the Linux kernel before 5.0.6, there is a NULL pointer de…5.5
- CVE-2019-20055LuquidPixels LiquiFire OS 4.8.0 allows SSRF via the call%3Du…6.5
- CVE-2019-20056stb_image.h (aka the stb image loader) 2.23, as used in libs…6.5
- CVE-2019-20058Bolt 3.7.0, if Symfony Web Profiler is used, allows XSS beca…6.1
- CVE-2019-20059payment_manage.ajax.php and various *_manage.ajax.php in MFS…8.8
- CVE-2019-2006In serviceDied of HalDeathHandlerHidl.cpp, there is a possib…
- CVE-2019-20060MFScripts YetiShare v3.5.2 through v4.5.4 places sensitive i…7.5
- CVE-2019-20061The user-introduction email in MFScripts YetiShare v3.5.2 th…7.5
- CVE-2019-20062MFScripts YetiShare v3.5.2 through v4.5.4 might allow an att…9.8
Are you affected by CVE-2019-20057?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST