CVE-2022-30215
published 2022-07-12CVE-2022-30215: Active Directory Federation Services Elevation of Privilege Vulnerability
PriorityP344high7.5CVSS 3.1
AVNACHPRLUINSUCHIHAH
EPSS
1.69%
74.5th percentile
Active Directory Federation Services Elevation of Privilege Vulnerability
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | windows_server_2016 | — | — |
| microsoft | windows_server_2016 | >= 10.0.14393.0 < 10.0.14393.5246 | 10.0.14393.5246 |
| microsoft | windows_server_2019 | >= 10.0.17763.0 < 10.0.17763.3165 | 10.0.17763.3165 |
| microsoft | windows_server_2022 | >= 10.0.20348.0 < 10.0.20348.825 | 10.0.20348.825 |
| microsoft | windows_server_version_20h2 | >= 10.0.0 < 10.0.19042.1826 | 10.0.19042.1826 |
| msrc | windows_server_2016 | — | — |
| msrc | windows_server_2019 | — | — |
| msrc | windows_server_2022 | — | — |
| msrc | windows_server_version_20h2 | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.08.5HIGHAV:N/AC:M/Au:S/C:C/I:C/A:C
vendor_msrc7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-c549-c54c-qvxq: Active Directory Federation Services Elevation of Privilege Vulnerability
ghsa_unreviewed·2022-07-13
CVE-2022-30215 [HIGH] GHSA-c549-c54c-qvxq: Active Directory Federation Services Elevation of Privilege Vulnerability
Active Directory Federation Services Elevation of Privilege Vulnerability.
Microsoft
Active Directory Federation Services Elevation of Privilege Vulnerability
vendor_msrc·2022-07-12·CVSS 7.5
CVE-2022-30215 [HIGH] Active Directory Federation Services Elevation of Privilege Vulnerability
Active Directory Federation Services Elevation of Privilege Vulnerability
FAQ: According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.
FAQ: What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker who successfully exploited this vulnerability could gain domain administrator privileges.
Windows Active Directory: Windows Active Directory
Microsoft: Microsoft
Customer Action Required: Yes
Impact: Elevation of Privilege
Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Rel
No detection rules found.
No public exploits indexed.
Talos
Microsoft Patch Tuesday for July 2022 — Snort rules and prominent vulnerabilities
blogs_talos·2022-07-12·CVSS 8.1
[HIGH] Microsoft Patch Tuesday for July 2022 — Snort rules and prominent vulnerabilities
## Microsoft Patch Tuesday for July 2022 — Snort rules and prominent vulnerabilities
Microsoft released its monthly security update Tuesday, disclosing more than 80 vulnerabilities in the company’s various software, hardware and firmware offerings, including one that’s actively being exploited in the wild.
July's security update features three critical vulnerabilities, up from one last month, still lower than Microsoft’s average in a Patch Tuesday. All the other vulnerabilities fixed are considered “important.”
All three critical vulnerabilities allow remote code execution on Microsoft Windows Systems. Of these, Microsoft considers the exploitation of CVE-2022-22029 , CVE-2022-22038 and CVE-2022-22039 less likely to occur. CVE-2022-22029 could be exploited over the network by making an
Talos
Microsoft Patch Tuesday for July 2022 — Snort rules and prominent vulnerabilities
blogs_talos·2022-07-12·CVSS 8.1
[HIGH] Microsoft Patch Tuesday for July 2022 — Snort rules and prominent vulnerabilities
Microsoft released its monthly security update Tuesday, disclosing more than 80 vulnerabilities in the company’s various software, hardware and firmware offerings, including one that’s actively being exploited in the wild.
July's security update features three critical vulnerabilities, up from one last month, still lower than Microsoft’s average in a Patch Tuesday. All the other vulnerabilities fixed are considered “important.”
All three critical vulnerabilities allow remote code execution on Microsoft Windows Systems. Of these, Microsoft considers the exploitation of CVE-2022-22029, CVE-2022-22038 and CVE-2022-22039 less likely to occur. CVE-2022-22029 could be exploited over the network by making an unauthenticated, specially crafted call to a Network File System (NFS). However, accord
2022-07-12
Published