CVE-2022-25372
Summary
| CVE | CVE-2022-25372 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-02-20 20:15:00 UTC |
| Updated | 2022-04-27 17:04:00 UTC |
| Description | Pritunl Client through 1.2.3019.52 on Windows allows local privilege escalation, related to an ACL entry for CREATOR OWNER in platform_windows.go. |
Risk And Classification
Problem Types: CWE-269
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Microsoft | Windows | - | All | All | All |
| Application | Pritunl | Pritunl-client-electron | All | All | All | All |
| Application | Pritunl | Pritunl-client-electron | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| pritunl-client-electron/CHANGES at caa78d626198b6961f3f39eca2acd39064c2df96 · pritunl/pritunl-client-electron · GitHub | MISC | github.com | |
| Update acl in service platform windows · pritunl/pritunl-client-electron@e16d474 · GitHub | MISC | github.com | |
| CVE-2022-25372:Local Privilege Escalation in Pritunl VPN Client - Rhino Security Labs | MISC | rhinosecuritylabs.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.