CVE-2022-43997

HIGH

7.8

Descricao

Incorrect access control in Aternity agent in Riverbed Aternity before 12.1.4.27 allows for local privilege escalation. There is an insufficiently protected handle to the A180AG.exe SYSTEM process with PROCESS_ALL_ACCESS rights.

Detalhes CVE

Pontuacao CVSS v3.17.8

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueLOCAL

ComplexidadeLOW

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado1/26/2023

Ultima modificacao4/1/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

aternity:aternity

Fraquezas (CWE)

CWE-269

Referencias

https://gist.github.com/jackullrich/21fcfe75aeb5e18c60b80e684b83d741(cve@mitre.org)

https://winternl.com/cve-2022-43997/(cve@mitre.org)

https://gist.github.com/jackullrich/21fcfe75aeb5e18c60b80e684b83d741(af854a3a-2127-422b-91ae-364da2661108)

https://winternl.com/cve-2022-43997/(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.