CVE-2022-2188

Published: Nov 7, 2022Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory controls in the logs directory. This can lead to a denial-of-service attack on the DXL Broker.

Affected (1)

Products: Mcafee: Data Exchange Layer

1 product

Data Exchange Layer

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mcafee Data Exchange Layer	Before 6.0.0.280

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (2)

https://kcm.trellix.com/corporate/index?page=content&id=SB10383

Source: trellixpsirt@trellix.com

Vendor Advisory

https://kcm.trellix.com/corporate/index?page=content&id=SB10383

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.