{"id":"CVE-2022-23714","published":"2022-07-06T13:57:27Z","modified":"2024-08-03T03:51:45Z","title":"A local privilege escalation (LPE) issue was discovered in the ransomware canaries features of Elastic Endpoint…","vendor":"Elastic","product":"Endpoint Security","tier":"core","eol":null,"affectedVersions":[{"vendor":"Elastic","product":"Endpoint Security","versions":["Versions 7.13.0 through 7.17.4 and 8.0.0 through 8.2.3"]}],"description":{"text":"A local privilege escalation (LPE) issue was discovered in the ransomware canaries features of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.","provenance":"source","from":"CVE.org"},"summary":null,"cvss":null,"epss":{"score":0.00231,"percentile":0.14047,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2023-01-17","exploitedFirstSeen":"2023-01-17","ransomware":true,"evidence":[{"url":"https://www.group-ib.com/resources/research-hub/hi-tech-crime-trends-2022/","date":"2023-01-17"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":null,"cwes":[{"id":"CWE-264","name":null}],"references":[{"url":"https://discuss.elastic.co/t/elastic-8-3-1-8-3-0-and-7-17-5-security-update/308613","tags":["x_refsource_MISC"]},{"url":"https://www.elastic.co/community/security","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2022-28650","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-28650","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2022-07-06","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2022-23714","provenance":"source"},{"date":"2023-01-17","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.group-ib.com/resources/research-hub/hi-tech-crime-trends-2022/","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":47.8,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1384 days ago"},{"name":"Known ransomware use","points":10.0,"detail":"VulnCheck KEV: Known"},{"name":"EPSS percentile","points":2.81,"detail":"percentile 0.1405"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}