CVE-2022-1316

Incorrect Permission Assignment for Critical Resource in zerotier/zerotierone

Incorrect Permission Assignment for Critical Resource in GitHub repository zerotier/zerotierone prior to 1.8.8. Local Privilege Escalation

Affected

zerotier · zerotier/zerotierone

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 HUNTR

8.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.40% chance of exploitation in the next 30 days, 33rd percentile

Published

2022-04-11

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/e7835226-1b20-4546-b256-3f625badb022

Security advisories

• zerotier/zerotierone/commit/ffb444dbeb6bea3cb155502395e61cb6d18708c9

References

• CVE Record
• NVD entry