CVE-2022-23909

Published April 5th, 2022

View on NVD ↗

CVSS v3

7.8

HIGH

CVSS v2

7.2

HIGH

Affected

PROJECT

Description

There is an unquoted service path in Sherpa Connector Service (SherpaConnectorService.exe) 2020.2.20328.2050. This might allow a local user to escalate privileges by creating a "C:\Program Files\Sherpa Software\Sherpa.exe" file.

netsectuna/CVE-2022-23909

Unquoted Service Path privilege escalation vulnerability in Sherpa Connector Service.

GitHub