Vulnerability Spotlight: CVE-2018-3952 / CVE-2018-4010 - Multi-provider VPN Client Privilege Escalation Vulnerabilities
Cisco Talos researchers found privilege escalation vulnerabilities in multi-provider VPN clients that let a standard user execute arbitrary commands through OpenVPN with administrator privileges, similar to CVE-2018-10169 discovered by VerSprite in April...