Lucene search

K
mscveMicrosoftMS:CVE-2022-29123
HistoryMay 10, 2022 - 8:00 a.m.

Windows Clustered Shared Volume Information Disclosure Vulnerability

2022-05-1008:00:00
Microsoft
msrc.microsoft.com
207
windows
clustered
shared volume
information disclosure
vulnerability
microsoft

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

AI Score

6.7

Confidence

High

EPSS

0

Percentile

9.5%

Affected configurations

Vulners
Node
microsoftwindows_server_2012Range<6.3.9600.20371r2
OR
microsoftwindows_server_2012Range<6.3.9600.20365r2
OR
microsoftwindows_server_2012Range<6.3.9600.20371r2
OR
microsoftwindows_server_2012Range<6.3.9600.20365r2
OR
microsoftwindows_server_2012Range<6.2.9200.23714
OR
microsoftwindows_server_2012Range<6.2.9200.23714
OR
microsoftwindows_server_2012Range<6.2.9200.23714
OR
microsoftwindows_server_2012Range<6.2.9200.23714
OR
microsoftwindows_server_2016Range<10.0.14393.5125
OR
microsoftwindows_server_2016Range<10.0.14393.5125
OR
microsoftwindows_server_20h2Range<10.0.19042.1706
OR
microsoftwindows_server_2022Range<10.0.20348.707
OR
microsoftwindows_server_2022Range<10.0.20348.707
OR
microsoftwindows_server_2019Range<10.0.17763.2928
OR
microsoftwindows_server_2019Range<10.0.17763.2928
VendorProductVersionCPE
microsoftwindows_server_2012*cpe:2.3:o:microsoft:windows_server_2012:*:r2:*:*:*:*:*:*
microsoftwindows_server_2012*cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*
microsoftwindows_server_2016*cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
microsoftwindows_server_20h2*cpe:2.3:o:microsoft:windows_server_20h2:*:*:*:*:*:*:*:*
microsoftwindows_server_2022*cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
microsoftwindows_server_2019*cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

AI Score

6.7

Confidence

High

EPSS

0

Percentile

9.5%