Lucene search
K

The vulnerability of Mozilla VPN’s network software lies in the ability to load the OpenSSL configuration file from an unprotected directory, allowing an attacker to execute arbitrary code with SYSTEM privileges.

🗓️ 28 Feb 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec
🔗 bdu.fstec.ru👁 1 Views

Mozilla VPN can load OpenSSL config from an unprotected directory, enabling SYSTEM code execution.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
CNNVD
Mozilla VPN 代码问题漏洞
25 Feb 202200:00
cnnvd
CVE
CVE-2022-0517
22 Dec 202200:00
cve
Cvelist
CVE-2022-0517
22 Dec 202200:00
cvelist
EUVD
EUVD-2022-15645
3 Oct 202520:07
euvd
Mozilla
Mozilla VPN local privilege escalation vis uncontrolled OpenSSL search path — Mozilla
23 Feb 202200:00
mozilla
NVD
CVE-2022-0517
22 Dec 202220:15
nvd
Prion
Privilege escalation
22 Dec 202220:15
prion
Positive Technologies
PT-2022-1721 · Mozilla · Vpn
23 Feb 202200:00
ptsecurity
RedhatCVE
CVE-2022-0517
9 Jan 202610:46
redhatcve
Vulnrichment
CVE-2022-0517
22 Dec 202200:00
vulnrichment
Rows per page
Vulners
Node

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

28 Feb 2022 00:00Current
7.6High risk
Vulners AI Score7.6
CVSS 26.8
CVSS 38.8
EPSS0.00041
1