CVE-2023-32022

Published: Jun 14, 2023Modified: Nov 21, 2024

7.6

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Exploitability: 2.8 / Impact: 4.7

Source: NVD (Secondary)

Description

Windows Server Service Security Feature Bypass Vulnerability

Affected (4)

Products: Microsoft: Windows Server 2012, Windows Server 2016, Windows Server 2019, Windows Server 2022

4 products

Windows Server 2012

Windows Server 2016

Windows Server 2019

Windows Server 2022

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows Server 2012	Version r2
Microsoft Windows Server 2016	All versions
Microsoft Windows Server 2019	All versions
Microsoft Windows Server 2022	All versions

Related CWEs

Improper Authorization

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

References (2)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32022

Source: secure@microsoft.com

MitigationPatchVendor Advisory

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32022

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationPatchVendor Advisory

Timeline

No history available yet.