CVE-2022-25153

Katalog CVE

CVSS 7.8 · High EPSS 0,34%

Kerentanan Permission Issues pada itarian endpoint manager communication client. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

The ITarian Endpoint Manage Communication Client, prior to version 6.43.41148.21120, is compiled using insecure OpenSSL settings. Due to this setting, a malicious actor with low privileges access to a system can escalate his privileges to SYSTEM abusing an insecure openssl.conf lookup.

Rincian

Terbit di NVD

9 Juni 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-275: Permission Issues

EPSS (30 hari)

0,34% peluang dieksploitasi; lebih tinggi dari 25,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://csirt.divd.nl/CVE-2022-25153 advisory pihak ketiga
• https://csirt.divd.nl/DIVD-2021-00037 advisory pihak ketiga