CVE-2022-43997: aternity Improper Privilege Management

Vulnerability summary

CVE-2022-43997 is a high (CVSS 7.8) Improper Privilege Management vulnerability in aternity. EPSS estimates a 0.33% chance of exploitation in the next 30 days, higher than 24.8% of scored vulnerabilities. 2 public exploits are recorded.

Timeline

1. 25-01-2023
   PublishedVulnerability first disclosed.
2. 01-04-2025
   Last modifiedVulnerability information updated.

Description

Incorrect access control in Aternity agent in Riverbed Aternity before 12.1.4.27 allows for local privilege escalation. There is an insufficiently protected handle to the A180AG.exe SYSTEM process with PROCESS_ALL_ACCESS rights.

• CWE-269Improper Privilege ManagementThe product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.