PT-2022-20742 · Adaware · Adaware Protect

Published 2022-06-16 · Updated 2023-08-08 · CVE-2022-31464

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Adaware Protect version 1.2.439.4251

Description The issue is related to an insecure permissions configuration, which allows attackers to escalate privileges by changing the service binary path.

Recommendations For Adaware Protect version 1.2.439.4251, update to a newer version that addresses the insecure permissions configuration issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2022-31464

Affected Products

Adaware Protect

References · 7

• 🔥 https://r0h1rr1m.medium.com/adaware-protect-local-privilege-escalation-through-insecure-service-permissions-44d0eeb6c933 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-31464 · Security Note
• https://osv.dev/vulnerability/CVE-2022-31464 · Vendor Advisory
• https://t.me/cibsecurity/44681 · Telegram Post
• https://t.me/cvenotify/31753 · Telegram Post
• https://t.me/cvenotify/32307 · Telegram Post
• https://adaware.com · Note