CVE-2022-25623

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The Symantec Management Agent is susceptible to a privilege escalation vulnerability. A low privilege local account can be elevated to the SYSTEM level through registry manipulations.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Mar 4, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-256258.8A malicious unauthorized PAM user can access the administration configuration data and change the values.CVE-2022-256265.3An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to c CVE-2022-256276.7An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Sy CVE-2022-256288.8An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4 CVE-2022-256295.4An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious annotation that can be execute CVE-2022-25634.8The Tutor LMS WordPress plugin before 2.0.10 does not escape some course parameters, which could allow high privilege users such as admin to CVE-2022-256305.4An authenticated user can embed malicious content with XSS into the admin group policy page.CVE-2022-256317.8Symantec Endpoint Protection, prior to 14.3 RU6 (14.3.9210.6000), may be susceptible to a Elevation of Privilege vulnerability, which is a t CVE-2022-256347.5Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.CVE-2022-256356.5Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet len CVE-2022-256367.8net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds w CVE-2022-256386.5In wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication by a TLS 1.3 client to a TLS 1.3 server. Thi