CVE-2022-2188: DXL Broker privilege escalation vulnerability
Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory controls in the logs directory. This can lead to a denial-of-service attack on the DXL Broker.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-2188?
CVE-2022-2188 is a privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280.
How can local users exploit CVE-2022-2188?
Local users can exploit CVE-2022-2188 by exploiting weak directory controls in the logs directory, allowing them to gain elevated privileges.
What is the impact of CVE-2022-2188?
The impact of CVE-2022-2188 is that local users can perform a denial-of-service attack on the DXL Broker.
Which software versions are affected by CVE-2022-2188?
DXL Broker for Windows prior to version 6.0.0.280 is affected by CVE-2022-2188.
Is Microsoft Windows affected by CVE-2022-2188?
No, Microsoft Windows is not affected by CVE-2022-2188.
What is the severity of CVE-2022-2188?
The severity of CVE-2022-2188 is medium with a CVSS score of 5.5.
How can the vulnerability CVE-2022-2188 be fixed?
To fix CVE-2022-2188, users should update DXL Broker for Windows to version 6.0.0.280.
Is there any additional reference available for CVE-2022-2188?
Yes, you can refer to the following link for more information: https://kcm.trellix.com/corporate/index?page=content&id=SB10383
What is the CWE ID for CVE-2022-2188?
CVE-2022-2188 is associated with CWE ID 732.