Lucene search
Veracode Vulnerability DatabaseVERACODE:38382HistoryDec 08, 2022 - 2:17 p.m.
Privilege Escalation
2022-12-0814:17:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
dsinternals
vulnerability
save function
roamedcredential.cs
privilege escalation
file system
elevate privileges
0.0004 Low
EPSS
Percentile
10.4%
DSInternals is vulnerable to privilege escalation. The vulnerability exists in the save function of RoamedCredential.cs because invalid characters are not properly parsed in windows roaming credential service which allows an attacker to write files on the file system with elevate privileges.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dsinternals.common | le | 2.21.2 | |
| dsinternals.common | le | 4.7.0 | |
| dsinternals.common | le | 2.21.2 | |
| dsinternals.common | le | 4.7.0 |
References
Related
attackerkb
attackerkb
CVE-2022-30170
2022-09-13 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2022-30170
2022-09-13 19:15:09
thn
thn
prion
prion
Privilege escalation
2022-09-13 19:15:00
osv
osv
DSInternals Credential Roaming Elevation of Privilege Vulnerability
2022-12-06 21:13:49
github
github
DSInternals Credential Roaming Elevation of Privilege Vulnerability
2022-12-06 21:13:49
mscve
mscve
Windows Credential Roaming Service Elevation of Privilege Vulnerability
2022-09-13 07:00:00
cve
cve
CVE-2022-30170
2022-09-13 19:15:09
mskb
mskb
September 13, 2022âKB5017358 (Monthly Rollup)
2022-09-13 07:00:00
September 13, 2022âKB5017370 (Monthly Rollup)
2022-09-13 07:00:00
September 13, 2022âKB5017373 (Security-only update)
2022-09-13 07:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5017361)
2022-09-14 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5017327)
2022-09-14 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5017308)
2022-09-14 00:00:00
nessus
nessus
KB5017371: Windows Server 2008 Security Update (September 2022)
2022-09-13 00:00:00
KB5017377: Windows Server 2012 Security Update (September 2022)
2022-09-13 00:00:00
KB5017373: Windows Server 2008 R2 Security Update (September 2022)
2022-09-13 00:00:00
kaspersky
kaspersky
KLA19249 Multiple vulnerabilities in Microsoft Products (ESU)
2022-09-13 00:00:00
KLA19245 Multiple vulnerabilities in Microsoft Windows
2022-09-13 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - September 2022
2022-09-13 20:11:08