CVE-2022-23922CWE-276

WIN-911 2021 Incorrect Default Permissions

Medium · published February 24, 2022

CVSS v3.1
5.6
EPSS
0%
Percentile
10.8
In the wild
Unconfirmed
What it is

WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an attacker to locally write files to the Program Announcer directory and elevate permissions whenever the program is executed.

The record
Technical detail
CVSS v3.1
5.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00211 · 10.8th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2022-02-24T18:26Z
EPSS history
Timeline
  • 24 FEB 18:26Z
    WIN-911 2021 Incorrect Default Permissions
    cvelistv5