CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.8. It affects OpenSSL.
CVE
CVE-2022-0166
Severity
HIGH
CVSS
7.8
EPSS
2.97%
OpenSSL
Original NVD Description
A privilege escalation vulnerability in the McAfee Agent prior to 5.7.5. McAfee Agent uses openssl.cnf during the build process to specify the OPENSSLDIR variable as a subdirectory within the installation directory. A low privilege user could have created subdirectories and executed arbitrary code with SYSTEM privileges by creating the appropriate pathway to the specifically created malicious openssl.cnf file.
Related CVEs
Other vulnerabilities affecting the same vendor(s)