Threat Encyclopedia

Privilege Escalation Vulnerability CVE-2022-38176 for Y Soft SafeQ

description-logoDescription

An issue was discovered in YSoft SAFEQ 6 before 6.0.72. Incorrect privileges were configured as part of the installer package for the Client V3 services, allowing for local user privilege escalation by overwriting the executable file via an alternative data stream. NOTE: this is not the same as CVE-2021-31859.

affected-products-logoAffected Applications

SafeQ

CVE References

CVE-2022-38176

Telemetry logoTelemetry