CVE-2022-27088

Ivanti DSM Remote <= 6.3.1.1862 is vulnerable to an unquoted service path allowing local users to launch processes with elevated privileges.

Score

CVSS 3.1 7.8 High

Status

Modified - cve@mitre.org

Published

2022-04-11

Last modified

2024-08-03

Weaknesses

CWE-428

Affected products

• Dsm Remote (Ivanti)

References

• https://hansesecure.de/2022/03/schwachstelle-in-dsm-remote/