Beveiligingsadvies

CVE-2022-25153

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-06-08 00:00:00

Laatst bijgewerkt 2025-03-11 13:39:17

Toegewezen door DIVD

CVSS-score 7.8

Status PUBLISHED

Beschrijving

The ITarian Endpoint Manage Communication Client, prior to version 6.43.41148.21120, is compiled using insecure OpenSSL settings. Due to this setting, a malicious actor with low privileges access to a system can escalate his privileges to SYSTEM abusing an insecure openssl.conf lookup.

← Alle CVE's bekijken Bekijk op cve.org ↗