CVE-2022-22187
An Improper Privilege Management vulnerability in the Windows Installer framework used in the Juniper Networks Juniper Identity Management Service (JIMS) allows an unprivileged user to trigger a repair operation. Running a repair operation, in turn, will trigger a number of file operations in the %TEMP% folder of the user triggering the repair. Some of these operations will be performed from a SYSTEM context (started via the Windows Installer service), including the execution of temporary files. An attacker may be able to provide malicious binaries to the Windows Installer, which will be executed with high privilege, leading to a local privilege escalation. This issue affects Juniper Networks Juniper Identity Management Service (JIMS) versions prior to 1.4.0.
EPSS 0.04% · 11.7th percentile
Risk Scores
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| juniper | identity_management_service | 0 |
| Juniper Networks | Juniper Identity Management Service (JIMS) | unspecified |
Exploit Intelligence
- https://kb.juniper.net/JSA69495 (circl)
- https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0029/MNDT-2022-0029.md (circl)
- Linux_Exploit_CVE_2021_4034.yar (github-yara)
- Linux_Exploit_CVE_2021_4034.yar (github-yara)
- Linux_Exploit_CVE_2021_4034.yar (github-yara)
- Linux_Exploit_CVE_2021_4034.yar (github-yara)
- Linux_Exploit_CVE_2021_3156.yar (github-yara)
- Linux_Exploit_CVE_2021_3156.yar (github-yara)
- Linux_Exploit_CVE_2021_3156.yar (github-yara)
- Linux_Exploit_CVE_2021_3156.yar (github-yara)
…and 52 more exploits
Timeline
- Apr 14, 2022 CVE Published
- Apr 15, 2022 EPSS Score
- Apr 26, 2022 EPSS Score
- Jun 4, 2022 EPSS Score
- Jul 25, 2022 EPSS Score
- Sep 14, 2022 EPSS Score
- Nov 3, 2022 EPSS Score
- Dec 23, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Apr 2, 2023 EPSS Score
- May 22, 2023 EPSS Score
- Jul 12, 2023 EPSS Score
References
- https://supportportal.juniper.net/s/article/2022-04-Security-Bulletin-Juniper-Secure-Analytics-JSA-Series-Heap-Based-Buffer-Overflow-in-Sudo-CVE-2021-3156?language=en_US advisory
- https://supportportal.juniper.net/s/article/2022-04-Security-Bulletin-JIMS-Local-Privilege-Escalation-vulnerability-via-repair-functionality-CVE-2022-22187?language=en_US advisory
- https://supportportal.juniper.net/s/article/2022-04-Security-Bulletin-Paragon-Active-Assurance-Local-Privilege-Escalation-in-polkits-pkexec-CVE-2021-4034?language=en_US advisory
- https://supportportal.juniper.net/s/article/2022-04-Security-Bulletin-Contrail-Service-Orchestration-An-authenticated-local-user-may-have-their-permissions-elevated-via-the-device-via-management-interface-without-authentication-CVE-2022-22189?language=en_US advisory
- https://supportportal.juniper.net/s/article/2022-04-Security-Bulletin-Contrail-Networking-Multiple-vulnerabilities-resolved-in-Contrail-Networking-21-3-CVE-yyyy-nnnn?language=en_US advisory
- https://supportportal.juniper.net/s/article/2022-04-Security-Bulletin-Paragon-Active-Assurance-Control-Center-Information-disclosure-vulnerability-in-crafted-URL-CVE-2022-22190?language=en_US advisory
- https://supportportal.juniper.net/s/article/2022-04-Security-Bulletin-Contrail-Networking-Multiple-Vulnerabilities-have-been-resolved-in-Contrail-Networking-release-2011-L4?language=en_US advisory
- https://kb.juniper.net/JSA69495 url
- https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0029/MNDT-2022-0029.md url
- https://nvd.nist.gov/vuln/detail/CVE-2022-22187 advisory