CVE-2022-41032 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Assigner	microsoft
Reserved	2022-09-19
Published	2022-10-11
Updated	2024-08-03

Description

NuGet Client Elevation of Privilege Vulnerability

HIGH: 7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Problem types

Elevation of Privilege

Product status

6.0.0 before 6.0.10

affected

3.1 before 3.1.30

affected

17.2.0 before 17.2.9

affected

16.11.0 before 16.11.20

affected

15.0.0 before 16.9.26

affected

17.0.0 before 17.0.15

affected

17.0.0 before 17.3.6

affected

17.3 before 17.3.7

affected

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41032

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X7BMHO5ITRBZREVTEKHQRGSFRPDMALV3/ (FEDORA-2022-f9ca76e479) vendor-advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HDPT2MJC3HD7HYZGASOOX6MTDR4ASBL5/ (FEDORA-2022-7f5f9ede26) vendor-advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FOG35Z5RL5W5RGLLYLN46CI4D2UPDSWM/ (FEDORA-2022-2c37647a9c) vendor-advisory

cve.org CVE-2022-41032

nvd.nist.gov CVE-2022-41032

Download JSON

https://cve.threatint.com

Subscribe to our newsletter to learn more about our work.