CVE-2022-43997: High severity aternity vulnerability
Published Jan 25, 2023
·Updated
Incorrect access control in Aternity agent in Riverbed Aternity before 12.1.4.27 allows for local privilege escalation. There is an insufficiently protected handle to the A180AG.exe SYSTEM process with PROCESSALLACCESS rights.
Affected Software
1 affected component
Aternity Aternity<12.1.4.27
Event History
Jan 25, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Jan 26, 2023
Data Sourced
via NVD·09:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-43997?
CVE-2022-43997 has a high severity rating due to the potential for local privilege escalation.
2
How do I fix CVE-2022-43997?
To fix CVE-2022-43997, upgrade the Aternity agent to version 12.1.4.27 or later.
3
What type of vulnerability is CVE-2022-43997?
CVE-2022-43997 is classified as an access control vulnerability leading to privilege escalation.
4
Who is affected by CVE-2022-43997?
Organizations using the Aternity agent version prior to 12.1.4.27 are affected by CVE-2022-43997.
5
What impact does CVE-2022-43997 have on my system?
CVE-2022-43997 can allow unauthorized users to gain elevated privileges, compromising system security.