Skip to content

CVE-2017-15358 Race condition in the Charles Proxy Settings suid binary in Charles Proxy before 4.2.1 allows local users to gain privileges via vectors involving the --self-repair option.

HighCVSS 7.0 EPSS 0.76% Public exploit
Published
Updated
Exploit status
Public exploit available

Description

Race condition in the Charles Proxy Settings suid binary in Charles Proxy before 4.2.1 allows local users to gain privileges via vectors involving the --self-repair option.

Affected products

ProductAffected versionsFixed in
charlesproxy charles < 4.2.1 4.2.1

References

  • m4.rkw.io exploit third-party-advisory
  • 45107 exploit third-party-advisory vdb-entry