CVE-2022-27608
Last modified
CVE-2022-27608 is a medium-severity vulnerability rated 6/10 on the CVSS scale. Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows is vulnerable to registry key tampering by users with Administrator privileges. This could result in a user disabling anti-tampering mechanisms which would then allow the user to disable Forcepoint One Endpoint and the protection offered by it.. EPSS estimates a 0.20% chance of exploitation in the next 30 days.
Description
Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows is vulnerable to registry key tampering by users with Administrator privileges. This could result in a user disabling anti-tampering mechanisms which would then allow the user to disable Forcepoint One Endpoint and the protection offered by it.
Metrics
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Forcepoint | One Endpoint | < 22.01 |
References
- https://help.forcepoint.com/security/CVE/CVE-2022-27608.htmlVendor Advisory
- https://help.forcepoint.com/security/CVE/CVE-2022-27608.htmlVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-27608?
How severe is CVE-2022-27608?
How do I fix CVE-2022-27608?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-27597A vulnerability has been reported to affect QNAP operating s…2.7
- CVE-2022-27598A vulnerability has been reported to affect QNAP operating s…2.7
- CVE-2022-27599An insertion of sensitive information into Log file vulnerab…4.4
- CVE-2022-2760In affected versions of Octopus Deploy it is possible to rev…4.3
- CVE-2022-27600An uncontrolled resource consumption vulnerability has been …7.5
- CVE-2022-27607Bento4 1.6.0-639 has a heap-based buffer over-read in the AP…8.1
- CVE-2022-27609Forcepoint One Endpoint prior to version 22.01 installed on …6
- CVE-2022-2761An information disclosure issue in GitLab CE/EE affecting al…5.3
- CVE-2022-27610Improper limitation of a pathname to a restricted directory …8.1
- CVE-2022-27611Improper limitation of a pathname to a restricted directory …8.1
- CVE-2022-27612Buffer copy without checking size of input ('Classic Buffer …9.8
- CVE-2022-27613Improper neutralization of special elements used in an SQL c…8.8
Are you affected by CVE-2022-27608?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST