CVE-2022-41950

Summary

super-xray is the GUI alternative for vulnerability scanning tool xray. In 0.2-beta, a privilege escalation vulnerability was discovered. This caused inaccurate default xray permissions. Note: this vulnerability only affects Linux and Mac OS systems. Users should upgrade to super-xray 0.3-beta.

Affected Software

Weaknesses

• CWE-250: CWE-250: Execution with Unnecessary Privileges

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/4ra1n/super-xray/security/advisories/GHSA-2g28-xrw6-fq5f
• https://github.com/4ra1n/super-xray/releases/tag/0.3-beta

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• https://github.com/4ra1n/super-xray/security/advisories/GHSA-2g28-xrw6-fq5f
• https://github.com/4ra1n/super-xray/releases/tag/0.3-beta

• ←Previous
• Next→