CVE-2022-31466

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-31466
Time of Check - Time of Use (TOCTOU) vulnerability in Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, potentially leading to deletion of system files. This is achieved through exploiting the time between detecting a file as malicious and when the action of quarantining or cleaning is performed, and using the time to replace the malicious file by a symlink.

7.9 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.5 / Impact : 5.8

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

4.4 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 3.4 / Impact : 6.4

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://softwaresec001.wordpress.com/2022/05/13/privilege-escalation-vulnerability-in-quick-heal-total-security/ Third Party Advisory
https://softwaresec001.wordpress.com/2022/05/13/privilege-escalation-vulnerability-in-quick-heal-total-security/ Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:quickheal:total_security:*:*:*:*:*:*:*:*
History

21 Nov 2024, 07:04

Type Values Removed Values Added
References () https://softwaresec001.wordpress.com/2022/05/13/privilege-escalation-vulnerability-in-quick-heal-total-security/ - Third Party Advisory () https://softwaresec001.wordpress.com/2022/05/13/privilege-escalation-vulnerability-in-quick-heal-total-security/ - Third Party Advisory
CVSS v2 : 4.4
v3 : 7.0 		v2 : 4.4
v3 : 7.9

08 Aug 2023, 14:22

Type Values Removed Values Added
CWE CWE-59

02 Jun 2022, 22:56

Type Values Removed Values Added
CPE cpe:2.3:a:quickheal:total_security:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : 4.4
v3 : 7.0
CWE CWE-367
References (MISC) https://softwaresec001.wordpress.com/2022/05/13/privilege-escalation-vulnerability-in-quick-heal-total-security/ - (MISC) https://softwaresec001.wordpress.com/2022/05/13/privilege-escalation-vulnerability-in-quick-heal-total-security/ - Third Party Advisory

02 Jun 2022, 14:15

Type Values Removed Values Added
Summary Quick Heal Total Security before 12.1.1.27 has a TOCTOU race condition that leads to privilege escalation. It may follow a symlink that was created after a malware check. Time of Check - Time of Use (TOCTOU) vulnerability in Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, potentially leading to deletion of system files. This is achieved through exploiting the time between detecting a file as malicious and when the action of quarantining or cleaning is performed, and using the time to replace the malicious file by a symlink.

23 May 2022, 19:16

Type Values Removed Values Added
New CVE
Information

Published : 2022-05-23 19:16

Updated : 2024-11-21 07:04

NVD link : CVE-2022-31466

Mitre link : CVE-2022-31466

CVE.ORG link : CVE-2022-31466

JSON object : View

Products Affected

quickheal

  • total_security
CWE
CWE-59

Improper Link Resolution Before File Access ('Link Following')

CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition