cbcvebase.

Gimmal Sherpa Connector Service vulnerabilities

1 known vulnerability affecting gimmal/sherpa_connector_service.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2022-23909P3HIGHCVSS 7.8PoCv2020.2.20328.20502022-04-05
CVE-2022-23909 [HIGH] CWE-428 CVE-2022-23909: There is an unquoted service path in Sherpa Connector Service (SherpaConnectorService.exe) 2020.2.20 There is an unquoted service path in Sherpa Connector Service (SherpaConnectorService.exe) 2020.2.20328.2050. This might allow a local user to escalate privileges by creating a "C:\Program Files\Sherpa Software\Sherpa.exe" file.
nvd
Gimmal Sherpa Connector Service vulnerabilities | cvebase