Lucene search

MitreCVE-2022-29908

HistorySep 19, 2022 - 4:15 p.m.

CVE-2022-29908

2022-09-1916:15:10

CWE-295

mitre

web.nvd.nist.gov

cve-2022-29908

fabasoft cloud

enterprise client

local privilege escalation

nvd

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

Percentile

5.1%

JSON

The folioupdate service in Fabasoft Cloud Enterprise Client 22.4.0043 allows Local Privilege Escalation.

Affected configurations

Nvd

Node

fabasoftfabasoft_cloud_enterprise_clientMatch22.4.0043

VendorProductVersionCPE
fabasoftfabasoft_cloud_enterprise_client22.4.0043cpe:2.3:a:fabasoft:fabasoft_cloud_enterprise_client:22.4.0043:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fabasoft	fabasoft_cloud_enterprise_client	22.4.0043	cpe:2.3:a:fabasoft:fabasoft_cloud_enterprise_client:22.4.0043:::::::*

References

help.cloud.fabasoft.com/index.php?topic=doc/Technical-Information-eng/the-fabasoft-cloud-enterprise-client.htm

www.compass-security.com/fileadmin/Research/Advisories/2022_13_CSNC-2022-010_LPE_Cloud_Client.txt

Social References

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2022-29908