deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-31208
Published: 2022-07-17
Description: An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The webserver contains an endpoint that can execute arbitrary commands by manipulating the cmd_string URL parameter.
CVSS Score: 8.8 (HIGH)
References: https://sec-consult.com/vulnerability-lab/advisory/infiray-iray-thermal-camera-multiple-vulnerabilities/; https://www.infiray.com/infrared-security-database.html; https://sec-consult.com/vulnerability-lab/advisory/infiray-iray-thermal-camera-multiple-vulnerabilities/
CVE: CVE-2022-31209
Published: 2022-07-17
Description: An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The firmware contains a potential buffer overflow by calling strcpy() without checking the string length beforehand.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://sec-consult.com/vulnerability-lab/advisory/infiray-iray-thermal-camera-multiple-vulnerabilities/; https://sec-consult.com/vulnerability-lab/advisory/infiray-iray-thermal-camera-multiple-vulnerabilities/
CVE: CVE-2022-31210
Published: 2022-07-17
Description: An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The binary file /usr/local/sbin/webproject/set_param.cgi contains hardcoded credentials to the web application. Because these accounts cannot be deactivated or have their passwords changed, they are considered to be backdoor accounts.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://sec-consult.com/vulnerability-lab/advisory/infiray-iray-thermal-camera-multiple-vulnerabilities/; https://sec-consult.com/vulnerability-lab/advisory/infiray-iray-thermal-camera-multiple-vulnerabilities/
CVE: CVE-2022-31211
Published: 2022-07-17
Description: An issue was discovered in Infiray IRAY-A8Z3 1.0.957. There is a blank root password for TELNET by default.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-521
References: https://sec-consult.com/vulnerability-lab/advisory/infiray-iray-thermal-camera-multiple-vulnerabilities/; https://sec-consult.com/vulnerability-lab/advisory/infiray-iray-thermal-camera-multiple-vulnerabilities/
CVE: CVE-2022-31212
Published: 2022-07-17
Description: An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus service's Exec line. c-shquote contains a stack-based buffer over-read if a malicious Exec line is supplied.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/bus1/dbus-broker/compare/v30...v31; https://sec-consult.com/vulnerability-lab/advisory/memory-corruption-vulnerabilities-dbus-broker/; https://security.gentoo.org/glsa/202305-04
CVE: CVE-2022-31213
Published: 2022-07-17
Description: An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/bus1/dbus-broker/compare/v30...v31; https://sec-consult.com/vulnerability-lab/advisory/memory-corruption-vulnerabilities-dbus-broker/; https://security.gentoo.org/glsa/202305-04
CVE: CVE-2022-32985
Published: 2022-07-17
Description: libnx_apl.so on Nexans FTTO GigaSwitch before 6.02N and 7.x before 7.02 implements a Backdoor Account for SSH logins on port 50200 or 50201.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://sec-consult.com/vulnerability-lab/advisory/hardcoded-backdoor-user-outdated-software-components-nexans-ftto-gigaswitch/; https://www.nexans.de/de/products/Data-Network-Solutions/Industrial-and-office-switches.html; https://sec-consult.com/vulnerability-lab/advisory/hardcoded-backdoor-user-outdated-software-components-nexans-ftto-gigaswitch/
CVE: CVE-2022-33903
Published: 2022-07-17
Description: Tor 0.4.7.x before 0.4.7.8 allows a denial of service via the wedging of RTT estimation.
CVSS Score: 7.5 (HIGH)
References: https://lists.torproject.org/pipermail/tor-announce/2022-June/000242.html; https://security-tracker.debian.org/tracker/CVE-2022-33903; https://security.gentoo.org/glsa/202305-11
CVE: CVE-2020-16093
Published: 2022-07-18
Description: In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2250; https://lemonldap-ng.org/download; https://lists.debian.org/debian-lts-announce/2023/01/msg00027.html
CVE: CVE-2020-23561
Published: 2022-07-18
Description: IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x[PII_REDACTED]005722.
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/nhiephon/Research; https://www.irfanview.com/plugins.htm; https://github.com/nhiephon/Research
CVE: CVE-2020-23562
Published: 2022-07-18
Description: IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x[PII_REDACTED]00aefe.
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/nhiephon/Research; https://www.irfanview.com/plugins.htm; https://github.com/nhiephon/Research
CVE: CVE-2020-23563
Published: 2022-07-18
Description: IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x[PII_REDACTED]002cba.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/nhiephon/Research; https://www.irfanview.com/plugins.htm; https://github.com/nhiephon/Research
CVE: CVE-2021-40874
Published: 2022-07-18
Description: An issue was discovered in LemonLDAP::NG (aka lemonldap-ng) 2.0.13. When using the RESTServer plug-in to operate a REST password validation service (for another LemonLDAP::NG instance, for example) and using the Kerberos authentication method combined with another method with the Combination authentication plug-in, any password will be recognized as valid for an existing user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2612; https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2612
CVE: CVE-2021-41419
Published: 2022-07-18
Description: QVIS NVR DVR before 2021-12-13 is vulnerable to Remote Code Execution via Java deserialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://gist.github.com/Meeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee/712ac36c8a08e2698e875169442a23a4; https://github.com/projectdiscovery/nuclei-templates/blob/master/iot/qvisdvr-deserialization-rce.yaml; https://twitter.com/Me9187/status/[PII_REDACTED]68348163
CVE: CVE-2021-42923
Published: 2022-07-18
Description: ShowMyPC 3606 on Windows suffers from a DLL hijack vulnerability. If an attacker overwrites the file %temp%\ShowMyPC\-ShowMyPC3606\wodVPN.dll, it will run any malicious code contained in that file. The code will run with normal user privileges unless the user specifically runs ShowMyPC as administrator.
CVSS Score: 7.3 (HIGH)
CWE: CWE-427
References: http://showmypc.com; https://f20.be/cves/showmypc-cve-2021-42923; http://showmypc.com
CVE: CVE-2021-44954
Published: 2022-07-18
Description: In QVIS NVR DVR before 2021-12-13, an attacker can escalate privileges from a qvisdvr user to the root user by abusing a Sudo misconfiguration.
CVSS Score: 7.8 (HIGH)
References: https://gist.github.com/Meeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee/a670418d51051d4e6513d86e84e8d5b8; https://twitter.com/Me9187/status/[PII_REDACTED]87404039; https://gist.github.com/Meeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee/a670418d51051d4e6513d86e84e8d5b8
CVE: CVE-2022-27434
Published: 2022-07-18
Description: UNIT4 TETA Mobile Edition (ME) before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/LongWayHomie/CVE-2022-27434; https://teta.unit4.com/pl; https://github.com/LongWayHomie/CVE-2022-27434
CVE: CVE-2022-33891
Published: 2022-07-18
Description: The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilter can allow someone to perform impersonation by providing an arbitrary user name. A malicious user might then be able to reach a permission check function that will ultimately build a Unix shell command based on their input, and execute it. This will result in arbitrary shell command execution as the user Spark is currently running as. This affects Apache Spark versions 3.0.3 and earlier, versions 3.1.1 to 3.1.2, and versions 3.2.0 to 3.2.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: http://packetstormsecurity.com/files/168309/Apache-Spark-Unauthenticated-Command-Injection.html; http://www.openwall.com/lists/oss-security/2023/05/02/1; https://lists.apache.org/thread/p847l3kopoo5bjtmxrcwk21xp6tjxqlc
CVE: CVE-2016-15003
Published: 2022-07-18
Description: A vulnerability has been found in FileZilla Client 3.17.0.0 and classified as problematic. This vulnerability affects unknown code of the file C:\Program Files\FileZilla FTP Client\uninstall.exe of the component Installer. The manipulation leads to unquoted search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-428, CWE-428
References: https://vuldb.com/?id.97204; https://www.exploit-db.com/exploits/39803/; https://youtu.be/r06VwwJ9J4M
CVE: CVE-2022-36127
Published: 2022-07-18
Description: A vulnerability in Apache SkyWalking NodeJS Agent prior to 0.5.1. The vulnerability will cause NodeJS services that has this agent installed to be unavailable if the OAP is unhealthy and NodeJS agent can't establish the connection.
CVSS Score: 7.5 (HIGH)
References: http://www.openwall.com/lists/oss-security/2022/07/18/1; https://lists.apache.org/thread/x238wo4r5goy39dxdjcmlofp6gcdnqr3; http://www.openwall.com/lists/oss-security/2022/07/18/1
CVE: CVE-2022-24688
Published: 2022-07-18
Description: An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. The Touch settings allow unrestricted file upload (and consequently Remote Code Execution) via PDF upload with PHP content and a .php extension. The attacker must hijack or obtain privileged user access to the Parameters page in order to exploit this issue. (That can be easily achieved by exploiting the Broken Access Control with further Brute-force attack or SQL Injection.) The uploaded file is stored within the database and copied to the sync web folder if the attacker visits a certain .php?action= page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://dsk.lu/fr/produits/temps-de-presence; https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2022-24688-92.pdf; https://dsk.lu/fr/produits/temps-de-presence
CVE: CVE-2022-24689
Published: 2022-07-18
Description: An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. It mishandles access control. This allows a remote attacker to access account information pages (including personal data) without being authenticated. The collected information includes the badge numbers that operate as user login names. They have a PIN code. The PIN code is 4 digits and thus can be guessed in 10000 brute force attempts.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-307
References: https://dsk.lu/fr/produits/temps-de-presence; https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2022-24688-92.pdf; https://dsk.lu/fr/produits/temps-de-presence
CVE: CVE-2022-24690
Published: 2022-07-18
Description: An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. A PresAbs.php SQL Injection vulnerability allows unauthenticated users to taint database data and extract sensitive information via crafted HTTP requests. The type of SQL Injection is blind boolean based. (An unauthenticated attacker can discover the endpoint by abusing a Broken Access Control issue with further SQL injection attacks to gather all user's badge numbers and PIN codes.)
CVSS Score: 8.2 (HIGH)
CWE: CWE-89
References: https://dsk.lu/fr/produits/temps-de-presence; https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2022-24688-92.pdf; https://dsk.lu/fr/produits/temps-de-presence
CVE: CVE-2022-24691
Published: 2022-07-18
Description: An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. A SQL Injection vulnerability allows authenticated users to taint database data and extract sensitive information via crafted HTTP requests. The type of SQL Injection is blind boolean based.
CVSS Score: 7.1 (HIGH)
CWE: CWE-89
References: https://dsk.lu/fr/produits/temps-de-presence; https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2022-24688-92.pdf; https://dsk.lu/fr/produits/temps-de-presence
CVE: CVE-2022-24692
Published: 2022-07-18
Description: An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. The new menu option within the general Parameters page is vulnerable to stored XSS. The attacker can create a menu option, make it visible to every application user, and conduct session hijacking, account takeover, or malicious code delivery, with the final goal of achieving client-side code execution.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://dsk.lu/fr/produits/temps-de-presence; https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2022-24688-92.pdf; https://dsk.lu/fr/produits/temps-de-presence
CVE: CVE-2022-30620
Published: 2022-07-18
Description: On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing the following cookie values from "is_admin", "showConfig". Administrative Privileges which allows changing various configuration in the camera.
CVSS Score: 8.2 (HIGH)
CWE: CWE-565
References: https://www.gov.il/en/departments/faq/cve_advisories; https://www.gov.il/en/departments/faq/cve_advisories
CVE: CVE-2022-30621
Published: 2022-07-18
Description: Allows a remote user to read files on the camera's OS "GetFileContent.cgi". Reading arbitrary files on the camera's OS as root user.
CVSS Score: 7.6 (HIGH)
CWE: CWE-706
References: https://www.gov.il/en/departments/faq/cve_advisories; https://www.gov.il/en/departments/faq/cve_advisories
CVE: CVE-2022-30623
Published: 2022-07-18
Description: The server checks the user's cookie in a non-standard way, and a value is entered in the cookie value name of the status and its value is set to true to bypass the identification with the system using a username and password.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-288, CWE-287
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2022-30624
Published: 2022-07-18
Description: Browsing the admin.html page allows the user to reset the admin password. Also appears in the JS code for the password.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2022-30625
Published: 2022-07-18
Description: Directory listing is a web server function that displays the directory contents when there is no index file in a specific website directory. A directory listing provides an attacker with the complete index of all the resources located inside of the directory. The specific risks and consequences vary depending on which files are listed and accessible.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-548, CWE-200
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2022-30626
Published: 2022-07-18
Description: Browsing the path: http://ip/wifi_ap_pata_get.cmd, will show in the name of the existing access point on the component, and a password in clear text.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-312
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2022-30627
Published: 2022-07-18
Description: This vulnerability affects all of the company's products that also include the FW versions: update_i90_cv2.021_b20210104, update_i50_v1.0.55_b20200509, update_x6_v2.1.2_b202001127, update_b5_v2.0.9_b20200706. This vulnerability makes it possible to extract from the FW the existing user passwords on their operating systems and passwords.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-798
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2022-32450
Published: 2022-07-18
Description: AnyDesk 7.0.9 allows a local user to gain SYSTEM privileges via a symbolic link because the user can write to their own %APPDATA% folder (used for ad.trace and chat) but the product runs as SYSTEM when writing chat-room data there.
CVSS Score: 7.1 (HIGH)
CWE: CWE-59
References: http://anydesk.com; http://packetstormsecurity.com/files/167608/AnyDesk-7.0.9-Arbitrary-File-Write-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2022/Jul/9
CVE: CVE-2022-35404
Published: 2022-07-18
Description: ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20
References: https://manageengine.com; https://www.manageengine.com/itom/advisory/cve-2022-35404.html; https://manageengine.com
CVE: CVE-2021-33655
Published: 2022-07-18
Description: When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: http://www.openwall.com/lists/oss-security/2022/07/19/2; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=086ff[PII_REDACTED]3a0bbf25830c4f36412a7d3f4; https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html
CVE: CVE-2021-33656
Published: 2022-07-18
Description: When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787, CWE-787
References: http://www.openwall.com/lists/oss-security/2022/07/19/3; https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/releases/5.10.127/vt-drop-old-font-ioctls.patch; https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html
CVE: CVE-2022-23142
Published: 2022-07-18
Description: ZXEN CG200 has a DoS vulnerability. An attacker could construct and send a large number of HTTP GET requests in a short time, which can make the product management websites not accessible.
CVSS Score: 5.3 (MEDIUM)
References: https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1025304; https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1025304
CVE: CVE-2022-2400
Published: 2022-07-18
Description: External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-73
References: https://github.com/dompdf/dompdf/commit/99aeec1efec9213e87098d42eb09439e7ee0bb6a; https://huntr.dev/bounties/a6da5e5e-86be-499a-a3c3-2950f749202a; https://lists.debian.org/debian-lts-announce/2023/07/msg00017.html
CVE: CVE-2022-34889
Published: 2022-07-18
Description: This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 17.1.1 (51537). An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the ACPI virtual device. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-16554.
CVSS Score: 8.2 (HIGH)
CWE: CWE-125
References: https://kb.parallels.com/125013; https://www.zerodayinitiative.com/advisories/ZDI-22-940/; https://kb.parallels.com/125013
CVE: CVE-2022-34890
Published: 2022-07-18
Description: This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 17.1.1 (51537). An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Parallels Tools component. The issue results from the lack of proper validation of a user-supplied value prior to dereferencing it as a pointer. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-16653.
CVSS Score: 8.8 (HIGH)
CWE: CWE-822
References: https://kb.parallels.com/125013; https://www.zerodayinitiative.com/advisories/ZDI-22-941/; https://kb.parallels.com/125013
CVE: CVE-2022-34891
Published: 2022-07-18
Description: This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the update machanism. The product sets incorrect permissions on sensitive files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-16395.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://kb.parallels.com/125013; https://www.zerodayinitiative.com/advisories/ZDI-22-942/; https://kb.parallels.com/125013
CVE: CVE-2022-34892
Published: 2022-07-18
Description: This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the update machanism. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-16396.
CVSS Score: 7.8 (HIGH)
CWE: CWE-362
References: https://kb.parallels.com/125013; https://www.zerodayinitiative.com/advisories/ZDI-22-943/; https://kb.parallels.com/125013
CVE: CVE-2022-34899
Published: 2022-07-18
Description: This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability. The specific flaw exists within the Parallels service. By creating a symbolic link, an attacker can abuse the service to execute a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-16134.
CVSS Score: 7.8 (HIGH)
CWE: CWE-367
References: https://kb.parallels.com/en/129010; https://www.zerodayinitiative.com/advisories/ZDI-22-947/; https://kb.parallels.com/en/129010
CVE: CVE-2022-34900
Published: 2022-07-18
Description: This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.3 (39313) Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Dispatcher service. The service loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-15213.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://kb.parallels.com/en/129010; https://www.zerodayinitiative.com/advisories/ZDI-22-945/; https://kb.parallels.com/en/129010