CVE-2022-0074CWE-426

Privilege Escalation in OpenLiteSpeed Web Server

High · published October 27, 2022

CVSS v3.1
8.8
EPSS
1%
Percentile
69.4
In the wild
Unconfirmed
What it is

Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Container allows Privilege Escalation. This affects versions from 1.6.15 before 1.7.16.1.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01260 · 69.4th percentile
Weakness
CWE-426 · Untrusted Search Path
Published
2022-10-27T19:32Z
EPSS history
Timeline
  • 27 OCT 19:32Z
    Privilege Escalation in OpenLiteSpeed Web Server
    cvelistv5