PT-2022-19521 · Notable+1 · Notable+1

Published 2022-04-15 · Updated 2023-08-08 · CVE-2022-29281

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Notable versions prior to 1.9.0-beta.8

Description The issue arises from improper validation of the file URI scheme, allowing the opening of executable files when clicking on a link. This could lead to the execution of an arbitrary program or the theft of NTLM credentials via an SMB relay attack, as the application resolves UNC paths. A hyperlink to an SMB share could be used to exploit this issue.

Recommendations For versions prior to 1.9.0-beta.8, update to version 1.9.0-beta.8 or later to resolve the issue. As a temporary workaround, consider disabling the ability to open executable files from links until a patch is available. Restrict access to SMB shares to minimize the risk of exploitation. Avoid using hyperlinks to SMB shares in the affected application until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-29281

Affected Products

Notable

Notable-Insiders

References · 7

• 🔥 https://github.com/hmnthabit/Advisories/blob/master/CVE-2022-29281.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-29281 · Security Note
• https://osv.dev/vulnerability/CVE-2022-29281 · Vendor Advisory
• https://github.com/notable/notable-insiders/releases/tag/v1.9.0-beta.8 · Note
• https://t.me/cibsecurity/40974 · Telegram Post
• https://t.me/cvenotify/29062 · Telegram Post
• https://t.me/cvenotify/39016 · Telegram Post