Skip to content
OpenAdvisories
Medium · 5.6 CVE-2022-23922 EUVD-2022-28842GHSA-gw8p-8q4c-pv8m

WIN-911 2021 Incorrect Default Permissions

Published Feb 24, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Description

WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an attacker to locally write files to the Program Announcer directory and elevate permissions whenever the program is executed.

Affected products

VendorProductAffectedFixed
WIN-911 WIN-911 2021 R1 5.21.10, 2021 R2 5.21.17 —

Advisories 1

References