CVE-2022-25153

The CVE-2022-25153 entry concerns the ITarian Endpoint Manage Communication Client. Affected software prior to version 6.43.41148.21120 is compiled with insecure OpenSSL settings, enabling a low-privilege attacker to escalate to SYSTEM by abusing an insecure openssl.conf lookup. Patches exist: up...