Time of Check - Time of Use (TOCTOU) vulnerability in Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, potentially leading to deletion of system files. This is achieved through exploiting the time between detecting a file as malicious and when the action of quarantining or cleaning is performed, and using the time to replace the malicious file by a symlink.
References
| Link | Resource |
|---|---|
| https://softwaresec001.wordpress.com/2022/05/13/privilege-escalation-vulnerability-in-quick-heal-total-security/ | Third Party Advisory |
Configurations
History
08 Aug 2023, 14:22
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-59 |
02 Jun 2022, 22:56
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 4.4
v3 : 7.0 |
| CPE | cpe:2.3:a:quickheal:total_security:*:*:*:*:*:*:*:* | |
| First Time |
Quickheal total Security
Quickheal |
|
| References | (MISC) https://softwaresec001.wordpress.com/2022/05/13/privilege-escalation-vulnerability-in-quick-heal-total-security/ - Third Party Advisory | |
| CWE | CWE-367 |
02 Jun 2022, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Time of Check - Time of Use (TOCTOU) vulnerability in Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, potentially leading to deletion of system files. This is achieved through exploiting the time between detecting a file as malicious and when the action of quarantining or cleaning is performed, and using the time to replace the malicious file by a symlink. |
23 May 2022, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-05-23 19:16
Updated : 2023-12-10 14:22
NVD link : CVE-2022-31466
Mitre link : CVE-2022-31466
CVE.ORG link : CVE-2022-31466
JSON object : View
Products Affected
quickheal
- total_security