CVE-2022-41950 - OpenCVE

super-xray is the GUI alternative for vulnerability scanning tool xray. In 0.2-beta, a privilege escalation vulnerability was discovered. This caused inaccurate default xray permissions. Note: this vulnerability only affects Linux and Mac OS systems. Users should upgrade to super-xray 0.3-beta.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Apple	Macos
Linux	Linux Kernel
Super Xray Project	Super Xray

Configuration 1 [-]

AND

cpe:2.3:a:super_xray_project:super_xray:0.2:beta:*:*:*:*:*:*

OR	cpe:2.3:o:apple:macos:-:::::::*
	cpe:2.3:o:linux:linux_kernel:-:::::::*

No data.

References

Link	Providers
https://github.com/4ra1n/super-xray/releases/tag/0.3-beta
https://github.com/4ra1n/super-xray/security/advisories/GHSA-2g28-xrw6-fq5f

History

No history.

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2022-11-22T00:00:00

Updated: 2024-08-03T12:56:38.654Z

Reserved: 2022-09-30T00:00:00

Link: CVE-2022-41950

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2022-11-22T18:15:10.287

Modified: 2022-11-26T03:29:17.810

Link: CVE-2022-41950

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:super_xray_project:super_xray:0.2:beta:*:*:*:*:*:*", "matchCriteriaId": "785D4CE2-6862-40D6-934E-9E93ECB8C0FF", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E", "vulnerable": false}, {"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "super-xray is the GUI alternative for vulnerability scanning tool xray. In 0.2-beta, a privilege escalation vulnerability was discovered. This caused inaccurate default xray permissions. Note: this vulnerability only affects Linux and Mac OS systems. Users should upgrade to super-xray 0.3-beta."}, {"lang": "es", "value": "super-xray es la alternativa GUI para la herramienta de escaneo de vulnerabilidades xray. En la versi\u00f3n 0.2-beta, se descubri\u00f3 una vulnerabilidad de escalada de privilegios. Esto provoc\u00f3 permisos de rayos X predeterminados inexactos. Nota: esta vulnerabilidad s\u00f3lo afecta a los sistemas Linux y Mac OS. Los usuarios deben actualizar a super-xray 0.3-beta."}], "id": "CVE-2022-41950", "lastModified": "2022-11-26T03:29:17.810", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.5, "impactScore": 5.9, "source": "security-advisories@github.com", "type": "Secondary"}]}, "published": "2022-11-22T18:15:10.287", "references": [{"source": "security-advisories@github.com", "tags": ["Release Notes", "Third Party Advisory"], "url": "https://github.com/4ra1n/super-xray/releases/tag/0.3-beta"}, {"source": "security-advisories@github.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/4ra1n/super-xray/security/advisories/GHSA-2g28-xrw6-fq5f"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-250"}], "source": "security-advisories@github.com", "type": "Primary"}]}