CVE-2022-38176

{"id": "CVE-2022-38176", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2022-09-06T21:15:08.967", "references": [{"url": "https://www.ysoft.com/en/legal/ysoft-safeq-client-v3-local-privilege-escalation", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://ysoft.com", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.ysoft.com/en/legal/ysoft-safeq-client-v3-local-privilege-escalation", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://ysoft.com", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in YSoft SAFEQ 6 before 6.0.72. Incorrect privileges were configured as part of the installer package for the Client V3 services, allowing for local user privilege escalation by overwriting the executable file via an alternative data stream. NOTE: this is not the same as CVE-2021-31859."}, {"lang": "es", "value": "Se ha detectado un problema en YSoft SAFEQ 6 versiones anteriores a 6.0.72. Fueron configurados privilegios incorrectos como parte del paquete de instalaci\u00f3n de los servicios del Cliente V3, permitiendo una escalada de privilegios del usuario local al sobrescribir el archivo ejecutable por medio de un flujo de datos alternativo. NOTA: esto no es lo mismo que CVE-2021-31859.\n"}], "lastModified": "2024-11-21T07:15:56.433", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ysoft:safeq:6.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA81585C-2548-449C-B1BF-5288AF23E947"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build32:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66F8714A-C098-4FB8-BF3C-966466B93CEF"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build33:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7E52155-DE90-492E-959A-339E1BE79683"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build34:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E53A361-E775-4B7C-B26F-5527EBB74EF8"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build35:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DC1FB050-F460-43F3-9B08-51A79A93C9E1"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build36:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09BF07DA-47F3-4002-B13B-90409C756476"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build37:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "70E37BAC-9AD5-4F9F-983B-B6AF7D798389"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build38:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2FEBCEE6-8442-47DD-9417-DAFB90AE54B1"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build39:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4288C64-E6A4-4724-A991-834B0C7C629E"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build40:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4AECD471-134D-47B7-A35B-0C48659A9CAE"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build41:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7BDBDE0-105C-4140-B0EB-843BC8FFDDF7"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build42:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7A14715-0C5E-4648-9C8F-52356B11DA91"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build43:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5F34F1CF-7388-4865-A708-BAEAFB46FDD1"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build44:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5CAA458B-7E04-49F1-9431-B2452379A73C"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build45:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "15173475-41B5-4AB6-BC7B-B0EAB027A2C3"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build46:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5998894F-5F9E-46FB-9FE9-AA4233C51C48"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build47:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D81E1C89-B437-4D53-BF47-89E86E4D8E3D"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build48:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF786E8D-F04A-450E-9091-EFF3EF43124A"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build49:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8F2BB4C0-636B-46A6-A0FC-379837F07ED5"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build50:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "91FC2B3E-1E3D-48DB-958B-B50D0085EA7E"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build51:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77687CCE-6778-4E58-AEE0-5586AF22213E"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build52:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "48A384EA-4806-462E-AC2F-838608918D0C"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build53:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ECE640BB-1291-40D3-A5BF-C60DF8074BC8"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build54:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "92739D9A-0931-4F66-A0F5-848854EC0F19"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build55:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FD7E49DC-DB41-4507-8423-B3A998366FFB"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build56:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E909C1A-3EDC-4F14-BBC9-36429EF2F47D"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build57:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FDE4C452-5059-4118-BCF4-9E6F9D101051"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build58:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "103972CB-9627-4864-9ECC-353DFAE183A9"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build59:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "270DACEF-4164-48EE-A09B-F3AFC3F96922"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build60:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "551D9158-2BA3-41A5-BCC8-1C106C45A6A3"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build61:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2041E54F-EE13-430C-A356-32DD8C7888D3"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build62:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2116917F-48DB-406B-AC6D-38E15F8F184A"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build63:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77009C4D-5A00-48B7-B365-11BA35CE50C7"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build64:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7DF1389D-B27E-440F-B8BB-1CB86E7700A6"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build65:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52685F05-BEEE-4E71-92AA-2EDD55BDC86E"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build66:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "05305162-0D3E-459E-8607-4CFBCCEF3541"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build67:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6E35D2CD-89CB-4CCD-A447-A7C228CE6694"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build68:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D05FB02-3316-48EC-9D23-FA79684E95F6"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build69:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C12ED82-6E48-46FE-B25E-331BED09AE35"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build70:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B039050F-AC4E-4F48-B2DA-FF5DD70D9503"}, {"criteria": "cpe:2.3:a:ysoft:safeq:6.0:build71:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "402ADD85-9FEC-4EF4-9169-2FD84F3C5CBE"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}