CVE-2022-27608CWE-863
Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows is vulnerable to registry key tampering by users with Administrator privileges
Medium · published April 4, 2022
What it is
Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows is vulnerable to registry key tampering by users with Administrator privileges. This could result in a user disabling anti-tampering mechanisms which would then allow the user to disable Forcepoint One Endpoint and the protection offered by it.
The record
Technical detail
- CVSS v3.1
- 6.0 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00207 · 10.3th percentile
- Weakness
- CWE-863 · Incorrect Authorization
- Published
- 2022-04-04T19:45Z
EPSS history
Timeline