CVE-2022-29505

EPSS 0.07%
Published 27.04.2022 15:15:09
Last modified 21.11.2024 06:59:12
Source dl_cve@linecorp.com
Teams watchlist Login
Open Login

Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that could lead to privilege escalation.

Affected products Warnungen 0 Metrics 3 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Linecorp ≫ Line SwPlatformwindows Version < 7.8

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.07%	0.206

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov	4.4	3.4	6.4	AV:L/AC:M/Au:N/C:P/I:P/A:P

https://hackerone.com/reports/1423049

Third Party Advisory

Permissions Required

https://nvd.nist.gov/vuln/detail/CVE-2022-29505

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-29505

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-29505

EUVD