← Back

CVE-2022-37967

nvd nist
Published: Nov 9, 2022Modified: Jan 2, 2025

JSON object

Loading...
7.2
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.2 / Impact: 5.9
Source: secure@microsoft.com (Secondary)

Description

Windows Kerberos Elevation of Privilege Vulnerability

Affected (14)

Show all products
Microsoft: Windows Server 2008, Windows Server 2012, Windows Server 2016, Windows Server 2019, Windows Server 2022 · Fedoraproject: Fedora · Netapp: Management Services For Element Software, Management Services For Netapp Hci · Samba: Samba
Microsoft
5 products
Windows Server 2008
Windows Server 2012
Windows Server 2016
Windows Server 2019
Windows Server 2022
Fedoraproject
1 product
Fedora
Netapp
2 products
Management Services For Element Software
Management Services For Netapp Hci
Samba
1 product
Samba
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Windows Server 2008
All versions
Windows Server 2008
Version r2 sp1
Microsoft
Windows Server 2012
All versions
Windows Server 2012
Version r2
Windows Server 2016
All versions
Windows Server 2019
All versions
Windows Server 2022
All versions
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Fedora
Version 36
Fedora
Version 37
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Management Services For Element Software
All versions
Management Services For Netapp Hci
All versions
Configuration D
3 vulnerable
Vulnerable SoftwareAffected Versions
Samba
Samba
Before 4.15.13
Samba
From 4.16.0 to 4.16.8
Samba
From 4.17.0 to 4.17.4

References (3)

Source: secure@microsoft.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.