Adaware Protect privilege escalation | CVE-2022-31464
NAME
Adaware Protect privilege escalation
- Platforms Affected:
Adaware Protect 1.2.439.4251 - Risk Level:
7.8 - Exploitability:
Unproven - Consequences:
Gain Privileges
DESCRIPTION
Adaware Protect could allow a local authenticated attacker to gain elevated privileges on the system, caused by insecure permissions configuration. By changing the service binary path, an attacker could exploit this vulnerability to escalate privileges.
CVSS 3.0 Information
- Privileges Required: Low
- User Interaction: None
- Scope: Unchanged
- Access Vector: Local
- Access Complexity: Low
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: High
- Remediation Level: Unavailable
MITIGATION
No remedy available as of June 16, 2022.
- Reference Link:
https://r0h1rr1m.medium.com/adaware-protect-local-privilege-escalation-through-insecure-service-permissions-44d0eeb6c933 - Reference Link:
https://www.adaware.com/
If you like the site, please consider joining the telegram channel and supporting us on Patreon using the button below.
