CVE-2022-30215HighCVSS 7.5
Active Directory Federation Services Elevation of Privilege Vulnerability
🔗 CVE IDs covered (1)
📋 Description
According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.
What privileges could be gained by an attacker who successfully exploited the vulnerability? An attacker who successfully exploited this vulnerability could gain domain administrator privileges.
🎯 Affected products7
- Windows Server 2016
- Windows Server 2016 (Server Core installation)
- Windows Server 2019
- Windows Server 2019 (Server Core installation)
- Windows Server 2022
- Windows Server 2022 (Server Core installation)
- Windows Server, version 20H2 (Server Core Installation)
✅ Remediation
KB5015811 (Security Update) — fixed build 10.0.17763.3165 KB5015827 (Security Update) — fixed build 10.0.20348.825 KB5015807 (Security Update) — fixed build 10.0.19042.1826 KB5015808 (Security Update) — fixed build 10.0.14393.5246
🔗 References (9)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30215
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5015811
- referencehttps://support.microsoft.com/help/5015811
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5015827
- referencehttps://support.microsoft.com/help/5015827
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5015807
- referencehttps://support.microsoft.com/help/5015807
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5015808
- referencehttps://support.microsoft.com/help/5015808