CVE-2022-29505

Опубликовано: 27 апр. 2022

Источник: nvd

CVSS3: 7.8

CVSS2: 4.4

EPSS Низкий

Описание

Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that could lead to privilege escalation.

Ссылки

https://hackerone.com/reports/1423049
Permissions Required
Third Party Advisory
https://hackerone.com/reports/1423049
Permissions Required
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:linecorp:line:*:*:*:*:*:windows:*:*

Версия до 7.8 (исключая)

EPSS

Процентиль: 18%

0.00057

Низкий

7.8 High

CVSS3

4.4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-pw55-rm54-6wc6