VULNERABILITY INTELLIGENCE

CVE-2022-2188

CVSS score6.5 MEDIUM
EPSS probability0.15%
CISA KEVNot currently listed
Published2022-11-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Description

Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory controls in the logs directory. This can lead to a denial-of-service attack on the DXL Broker.

Weakness classification

  • CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references