github.com
https://github.com/pritunl/pritunl-client-electron/blob/caa78d626198b6961f3f39eca2acd39064c2df96/CHANGES CVE-2022-25372
HIGH
Record summary
CVE-2022-25372 has a selected CVSS score of 7.8 (high); EIP currently links 1 curated repository PoC.
Description
Pritunl Client through 1.2.3019.52 on Windows allows local privilege escalation, related to an ACL entry for CREATOR OWNER in platform_windows.go.
Description source: CVE List
Exploitation context
Available material
- Curated repository PoCs
- 1
Proofs of concept
1Curated repository PoCs
GitHubCVE-2022-25372Curated repository PoCby RhinoSecurityLabsStars: 905Not analyzed3 files
References
4github.com
https://github.com/pritunl/pritunl-client-electron/commit/e16d47437f8ef62546aa00edb0d64be2a7d2205b nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-25372 rhinosecuritylabs.com
https://rhinosecuritylabs.com/penetration-testing/cve-2022-25372-local-privilege-escalation-in-pritunl-vpn-client