2.7

CVE-2022-2841

Exploit

CrowdStrike Falcon Uninstallation authorization

A vulnerability was found in CrowdStrike Falcon 6.31.14505.0/6.42.15610/6.44.15806. It has been classified as problematic. Affected is an unknown function of the component Uninstallation Handler. The manipulation leads to missing authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 6.40.15409, 6.42.15611 and 6.44.15807 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-206880.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Crowdstrike ≫ Falcon Version6.31.14505.0
Crowdstrike ≫ Falcon Version6.42.15610
Crowdstrike ≫ Falcon Version6.44.15806
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.67% 0.882
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.7 1.2 1.4
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
cna@vuldb.com 2.7 1.2 1.4
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://vuldb.com/?ctiid.206880
Permissions Required
https://vuldb.com/?id.206880
Third Party Advisory
Exploit
https://www.modzero.com/advisories/MZ-22-02-CrowdStrike-FalconSensor.txt
Third Party Advisory
Exploit
https://www.modzero.com/modlog/archives/2022/08/22/ridiculous_vulnerability_disclosure_process_with_crowdstrike_falcon_sensor/index.html
Third Party Advisory
Exploit
https://youtu.be/3If-Fqwx-4s
Third Party Advisory
Exploit