PT-2022-5753 · Microsoft · Windows Active Directory Certificate Services+1

Published 2022-10-11 · Updated 2025-01-02 · CVE-2022-37978

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Active Directory Certificate Services (affected versions not specified)

Description The issue is related to insufficient access restrictions in the Active Directory Certificate Services component of Windows operating systems. It allows a remote attacker to bypass existing security restrictions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-254

Related Identifiers

BDU:2022-07152

CVE-2022-37978

Affected Products

Windows

Windows Active Directory Certificate Services

References · 8

• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-37978 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-07152 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37978 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37978 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37978 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-37978 · Security Note
• https://osv.dev/vulnerability/CVE-2022-37978 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2022-37978 · Vendor Advisory