Skip to content
CVE PROGRAM SOURCE RECORD5.6 Medium

CVE-2022-23922

WIN-911 2021 Incorrect Default Permissions

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an attacker to locally write files to the Program Announcer directory and elevate permissions whenever the program is executed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WIN-911 WIN-911

  • 2021 R1 5.21.10affected
  • 2021 R2 5.21.17affected

References