Vulnerability · Published May 18, 2022 · Assigned by Snow
CVE-2022-0883Windows Unquoted/Trusted Service Paths
High 7.3
In plain English
A high-severity security flaw in Snow License Manager from SNOW. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).
Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.2%top 85.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
SLM has an issue with Windows Unquoted/Trusted Service Paths Security Issue. All installations version 9.x.x prior to 9.20.1 should be patched.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SNOW | Snow License Manager | 9 * |
Weakness: CWE-428 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
References
- https://community.snowsoftware.com/s/feed/0D5690000BsNCO6CQO x_refsource_MISC