High severity · published Oct 27, 2022
CVE-2022-0074
Privilege Escalation in OpenLiteSpeed Web Server
8.8
CVSS
1.4%
EPSS
No
On KEV
Description
Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Container allows Privilege Escalation. This affects versions from 1.6.15 before 1.7.16.1.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LW
LiteSpeed Web Server · LiteSpeed Technologies
1.6.15 before 1.7.16.1 · source: vendor
OW
OpenLiteSpeed Web Server · LiteSpeed Technologies
1.6.15 before 1.7.16.1 · source: vendor
OP
Openlitespeed · Litespeedtech
1.6.15 before 1.7.16.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-0074
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-0074
Exploit
https://github.com/litespeedtech/ols-dockerfiles/blob/master/template/Dockerfile#L29
More from LiteSpeed Web Server
8.8
CVE-2022-0073
Authenticated Remote Code Execution in OpenLiteSpeed Web Server
5.8
CVE-2022-0072
Directory Traversal in OpenLiteSpeed Web Server
–
CVE-2007-5654
LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%00." sequence followed by a new extension, as demonstrated by…
–
CVE-2005-3695
Cross-site scripting (XSS) vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the m…