VDB
CVE-2022-27772
CVE-2022-27772
PUBLISHED
CVSS 8.699999809265137 HIGH
Es existiert eine Schwachstelle in VMware Tanzu Spring Boot. Der Fehler besteht aufgrund der Möglichkeit eines temporären Hijackings von Verzeichnissen, welches in einer Privilegieneskalation resultiert. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um seine Privilegien zu erweitern.
EPSS 0.44% · 63.6th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.44%
63.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| IBM | IBM Spectrum Protect Plus 10.1 |
Exploit Intelligence
- puneetbehl/grails3-cve-2022-27772 (github-poc)
- puneetbehl/grails3-cve-2022-27772 (github-poc)
- puneetbehl/grails3-cve-2022-27772 (github-poc)
- puneetbehl/grails3-cve-2022-27772 (github-poc)
- puneetbehl/grails3-cve-2022-27772 (github-poc)
- puneetbehl/grails3-cve-2022-27772 (github-poc)
- puneetbehl/grails3-cve-2022-27772 (github-poc)
- https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-cm59-pr5q-cw85 (nist-nvd)
Timeline
- Mar 30, 2022 CVE Published
- Mar 31, 2022 EPSS Score
- Apr 5, 2022 CVE Updated
- May 21, 2022 EPSS Score
- Aug 31, 2022 EPSS Score
- Oct 21, 2022 EPSS Score
- Dec 10, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 22, 2023 EPSS Score
- May 12, 2023 EPSS Score
- Aug 21, 2023 EPSS Score
- Oct 11, 2023 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0528.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0528 advisory
- https://www.dell.com/support/kbdoc/000222618/dsa-2024-= advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-0632.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0632 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-27772 advisory
- https://www.ibm.com/support/pages/node/7144861 advisory