PT-2022-24258 · Ysoft · Y Soft Safeq

Published 2022-09-06 · Updated 2024-11-01 · CVE-2022-38176

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions YSoft SAFEQ versions prior to 6.0.72

Description An issue in YSoft SAFEQ allows for local user privilege escalation. This is due to incorrect privileges configured as part of the installer package for the Client V3 services, enabling an attacker to overwrite the executable file via an alternative data stream.

Recommendations For versions prior to 6.0.72, update to version 6.0.72 or later to resolve the issue. As a temporary workaround, consider restricting access to the Client V3 services to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2022-38176

Affected Products

Y Soft Safeq

References · 8

• https://ysoft.com/en/legal/ysoft-safeq-client-v3-local-privilege-escalation · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-38176 · Vendor Advisory
• https://ysoft.com · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-38176 · Security Note
• https://t.me/cibsecurity/49375 · Telegram Post
• https://twitter.com/UndercodeNews/status/1852410281386823755 · Twitter Post
• https://t.me/cvenotify/100041 · Telegram Post
• https://t.me/cvenotify/100318 · Telegram Post