Vulnerability Details CVE-2022-28877
This vulnerability allows local user to delete arbitrary file in the system and bypassing security protection which can be abused for local privilege escalation on affected F-Secure & WithSecure windows endpoint products. An attacker must have code execution rights on the victim machine prior to successful exploitation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 5.1%
CVSS Severity
CVSS v3 Score 4.3
References
Products affected by CVE-2022-28877
-
cpe:2.3:a:f-secure:elements_endpoint_protection:-
-
cpe:2.3:a:f-secure:elements_endpoint_protection:2022-02-01_01
-
cpe:2.3:o:microsoft:windows:-