CVE-2022-48227

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48227
An issue was discovered in Acuant AsureID Sentinel before 5.2.149. It allows elevation of privileges because it opens Notepad after the installation of AssureID, Identify x64, and Identify x86, aka CORE-7361.

7.8 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://acuant.com Not Applicable
https://acuant.com Not Applicable
https://hackandpwn.com/disclosures/CVE-2022-48227.pdf Third Party Advisory
https://hackandpwn.com/disclosures/CVE-2022-48227.pdf Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:gbgplc:acuant_asureid_sentinel:*:*:*:*:*:*:*:*
History

13 Feb 2025, 22:15

Type Values Removed Values Added
References (MISC) https://acuant.com - Not Applicable () https://acuant.com - Not Applicable
References (MISC) https://hackandpwn.com/disclosures/CVE-2022-48227.pdf - Third Party Advisory () https://hackandpwn.com/disclosures/CVE-2022-48227.pdf - Third Party Advisory

11 Apr 2023, 15:01

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
References (MISC) https://hackandpwn.com/disclosures/CVE-2022-48227.pdf - (MISC) https://hackandpwn.com/disclosures/CVE-2022-48227.pdf - Third Party Advisory
References (MISC) https://acuant.com - (MISC) https://acuant.com - Not Applicable
First Time Gbgplc acuant Asureid Sentinel
Gbgplc
CWE CWE-269
CPE cpe:2.3:a:gbgplc:acuant_asureid_sentinel:*:*:*:*:*:*:*:*

04 Apr 2023, 17:40

Type Values Removed Values Added
New CVE
Information

Published : 2023-04-04 16:15

Updated : 2025-02-13 22:15

NVD link : CVE-2022-48227

Mitre link : CVE-2022-48227

JSON object : View

Products Affected

gbgplc

  • acuant_asureid_sentinel
CWE
CWE-269

Improper Privilege Management