Lucene search

CVE-2022-34902

🗓️ 18 Jul 2022 14:56:17Reported by zdiType

This document describes a vulnerability in Parallels Access 6.5.4 (39316) Agent that allows local attackers to escalate privileges by exploiting the unsecured loading of Qt plugins by the Desktop Control Agent service

Reporter	Title	Published	Views	Family All 4
Prion	Design/Logic Flaw	18 Jul 202215:15	–	prion
Zero Day Initiative	Parallels Access Agent Uncontrolled Search Path Element Local Privilege Escalation Vulnerability	1 Jul 202200:00	–	zdi
CVE	CVE-2022-34902	18 Jul 202215:15	–	cve
NVD	CVE-2022-34902	18 Jul 202215:15	–	nvd

[
  {
    "product": "Access",
    "vendor": "Parallels",
    "versions": [
      {
        "status": "affected",
        "version": "6.5.4 (39316)"
      }
    ]
  }
]

Source	Link
kb	www.kb.parallels.com/en/129010
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-22-946/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Jul 2022 14:17Current

8.0High risk

Vulners AI Score8.0

CVSS37.8

EPSS0.000

CWE-427