CVEvulnerability
CVE-2022-29908
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-09-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-295
Description
The folioupdate service in Fabasoft Cloud Enterprise Client 22.4.0043 allows Local Privilege Escalation.
Affected configurations
• fabasoft fabasoft cloud enterprise client 22.4.0043
Related
Weakness · CWE (1)
- CWE-295 Improper Certificate Validation weakness
References
- https://help.cloud.fabasoft.com/index.php?topic=doc/Technical-Information-eng/the-fabasoft-cloud-enterprise-client.htm Third Party Advisory
- https://www.compass-security.com/fileadmin/Research/Advisories/2022_13_CSNC-2022-010_LPE_Cloud_Client.txt Third Party Advisory
- https://help.cloud.fabasoft.com/index.php?topic=doc/Technical-Information-eng/the-fabasoft-cloud-enterprise-client.htm Third Party Advisory
- https://www.compass-security.com/fileadmin/Research/Advisories/2022_13_CSNC-2022-010_LPE_Cloud_Client.txt Third Party Advisory