CVE-2022-24527: Microsoft Connected Cache Local Privilege Escalation (Fixed)

🗓️ 12 Apr 2022 17:25:15Reported by Jake BainesType

CVE-2022-24527: Microsoft Connected Cache Local Privilege Escalation (Fixed). Local low-privileged user execute arbitrary Powershell as SYSTEM due to improper file permission assignment. Feature used by Microsoft Endpoint Manager Distribution Points for Delivery Optimization

Reporter	Title	Published	Views	Family All 66
Rapid7 Blog	CVE-2022-28810: ManageEngine ADSelfService Plus Authenticated Command Execution (Fixed)	14 Apr 202215:48	–	rapid7blog
Rapid7 Blog	CVE-2022-1026: Kyocera Net View Address Book Exposure	29 Mar 202213:29	–	rapid7blog
Rapid7 Blog	CVE-2022-30525 (FIXED): Zyxel Firewall Unauthenticated Remote Command Injection	12 May 202213:30	–	rapid7blog
Rapid7 Blog	Cloud Pentesting, Pt. 2: Testing Across Different Deployments	29 Mar 202217:31	–	rapid7blog
Rapid7 Blog	Lessons in IoT Hacking: How to Dead-Bug a BGA Flash Memory Chip	7 Apr 202215:14	–	rapid7blog
Rapid7 Blog	Cloud Pentesting, Pt. 3: The Impact of Ecosystem Maturity	4 Apr 202217:45	–	rapid7blog
Rapid7 Blog	CVE-2021-4191: GitLab GraphQL API User Enumeration (FIXED)	3 Mar 202217:01	–	rapid7blog
Rapid7 Blog	CVE-2022-22977: VMware Guest Authentication Service LPE (FIXED)	24 May 202218:00	–	rapid7blog
Rapid7 Blog	Analyzing the Attack Landscape: Rapid7’s 2021 Vulnerability Intelligence Report	28 Mar 202212:30	–	rapid7blog
Rapid7 Blog	Metasploit Weekly Wrap-Up	18 Mar 202217:38	–	rapid7blog

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Apr 2022 17:15Current

1.3Low risk

Vulners AI Score1.3

EPSS0.523