PT-2022-27423 · Unknown · Cbrn-Analysis

Dawid Czarnecki + 1 · Published 2022-11-11 · Updated 2025-04-29 · CVE-2022-45193

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CBRN-Analysis versions prior to 22

Description The issue is related to weak file permissions under the Public Profile, which can lead to the disclosure of file contents or privilege escalation.

Recommendations For versions prior to 22, update to version 22 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.

Fix

LPE

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2022-45193

Affected Products

Cbrn-Analysis

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-45193 · Security Note
• https://osv.dev/vulnerability/CVE-2022-45193 · Vendor Advisory
• https://t.me/cvenotify/120183 · Telegram Post
• https://zigrin.com/advisories/cbrn-analysis-unprotected-storage-of-application-files · Note
• https://t.me/cvenotify/37565 · Telegram Post
• https://t.me/cvenotify/37877 · Telegram Post