CVE-2022-37978 | THREATINT

Assigner	microsoft
Reserved	2022-08-08
Published	2022-10-11
Updated	2024-08-03

Description

Windows Active Directory Certificate Services Security Feature Bypass

HIGH: 7.5

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Problem types

Security Feature Bypass

Product status

10.0.0 before 10.0.17763.3532

affected

10.0.0 before 10.0.17763.3532

affected

10.0.0 before 10.0.17763.3532

affected

10.0.0 before 10.0.19043.2130

affected

10.0.0 before 10.0.20348.1129

affected

10.0.0 before 10.0.19042.2130

affected

10.0.0 before 10.0.22000.1098

affected

10.0.0 before 10.0.19044.2130

affected

10.0.0 before 10.0.22621.674

affected

10.0.0 before 10.0.10240.19507

affected

10.0.0 before 10.0.14393.5427

affected

10.0.0 before 10.0.14393.5427

affected

10.0.0 before 10.0.14393.5427

affected

6.1.0 before 6.1.7601.26174

affected

6.1.0 before 6.1.7601.26174

affected

6.3.0 before 6.3.9600.20625

affected

6.0.0 before 6.0.6003.21721

affected

6.0.0 before 6.0.6003.21721

affected

6.0.0 before 6.0.6003.21721

affected

6.1.0 before 6.1.7601.26174

affected

6.0.0 before 6.1.7601.26174

affected

6.2.0 before 6.2.9200.23920

affected

6.2.0 before 6.2.9200.23920

affected

6.3.0 before 6.3.9600.20625

affected

6.3.0 before 6.3.9600.20625

affected

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37978

cve.org CVE-2022-37978

nvd.nist.gov CVE-2022-37978

Download JSON