{"api_version":"1","generated_at":"2026-07-23T23:03:01+00:00","cve":"CVE-2022-23714","urls":{"html":"https://cve.report/CVE-2022-23714","api":"https://cve.report/api/cve/CVE-2022-23714.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2022-23714","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2022-23714"},"summary":{"title":"CVE-2022-23714","description":"A local privilege escalation (LPE) issue was discovered in the ransomware canaries features of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.","state":"PUBLIC","assigner":"security@elastic.co","published_at":"2022-07-06 14:15:00","updated_at":"2023-07-03 20:34:00"},"problem_types":["NVD-CWE-noinfo"],"metrics":[],"references":[{"url":"https://discuss.elastic.co/t/elastic-8-3-1-8-3-0-and-7-17-5-security-update/308613","name":"https://discuss.elastic.co/t/elastic-8-3-1-8-3-0-and-7-17-5-security-update/308613","refsource":"MISC","tags":[],"title":"Elastic 8.3.1, 8.3.0, and 7.17.5 Security Update - Security Announcements - Discuss the Elastic Stack","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.elastic.co/community/security","name":"https://www.elastic.co/community/security","refsource":"MISC","tags":[],"title":"","mime":"","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23714","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23714","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2022","cve_id":"23714","vulnerable":"1","versionEndIncluding":"7.17.4","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"elastic","cpe5":"endpoint_security","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2022","cve_id":"23714","vulnerable":"1","versionEndIncluding":"8.2.3","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"elastic","cpe5":"endpoint_security","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2022","cve_id":"23714","vulnerable":"-1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_format":"MITRE","data_type":"CVE","data_version":"4.0","CVE_data_meta":{"ASSIGNER":"security@elastic.co","ID":"CVE-2022-23714","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"vendor_name":"Elastic","product":{"product_data":[{"product_name":"Endpoint Security","version":{"version_data":[{"version_value":"Versions 7.13.0 through 7.17.4 and 8.0.0 through 8.2.3"}]}}]}}]}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-264"}]}]},"references":{"reference_data":[{"url":"https://discuss.elastic.co/t/elastic-8-3-1-8-3-0-and-7-17-5-security-update/308613","refsource":"MISC","name":"https://discuss.elastic.co/t/elastic-8-3-1-8-3-0-and-7-17-5-security-update/308613"},{"url":"https://www.elastic.co/community/security","refsource":"MISC","name":"https://www.elastic.co/community/security"}]},"description":{"description_data":[{"lang":"eng","value":"A local privilege escalation (LPE) issue was discovered in the ransomware canaries features of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account."}]}},"nvd":{"publishedDate":"2022-07-06 14:15:00","lastModifiedDate":"2023-07-03 20:34:00","problem_types":["NVD-CWE-noinfo"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"severity":"HIGH","exploitabilityScore":3.9,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"AND","children":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:elastic:endpoint_security:*:*:*:*:*:*:*:*","versionStartIncluding":"7.13.0","versionEndIncluding":"7.17.4","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:elastic:endpoint_security:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.2.3","cpe_name":[]}]},{"operator":"OR","children":[],"cpe_match":[{"vulnerable":false,"cpe23Uri":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","cpe_name":[]}]}],"cpe_match":[]}]}},"legacy_mitre":{"record":{"CveYear":"2022","CveId":"23714","Ordinal":"226576","Title":"CVE-2022-23714","CVE":"CVE-2022-23714","Year":"2022"},"notes":[{"CveYear":"2022","CveId":"23714","Ordinal":"1","NoteData":"** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.","Type":"Description","Title":null}]}}}