Beveiligingsadvies

CVE-2022-4991

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-01 15:49:12

Laatst bijgewerkt 2026-06-02 15:47:22

Toegewezen door certcc

CVSS-score 7.4

Status PUBLISHED

Beschrijving

Tychon includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory that may be controllable by an unprivileged user on Windows. Tychon contains a privileged service that uses this OpenSSL component. A user who can place a specially-crafted openssl.cnf file at an appropriate path may be able to achieve arbitrary code execution with SYSTEM privileges.

← Alle CVE's bekijken Bekijk op cve.org ↗