OPENSSLDIR Location

[Talos]

Hi, 

I'm trying to get some more clarity on CVE-2022-0166. It states A low privilege user could have created subdirectories within OPESSLDIR to execute arbitrary code as SYSTEM. But if we have ACL's on the OPENSSLDIR I feel like this CVE is mitigated. Unfortunately I can't find any reference to where the OPENSSLDIR is actually located or find the OpenSSL.cnf file the CVE refers to. Anybody know the location of these? 

Thanks.   

[vivs]

I can see that there is a KB published from McAfee:

https://kc.mcafee.com/corporate/index?page=content&id=SB10378

Thanks

[Talos]

Hi, 

Yes I saw the KB but there is no real detail on the actual exploit, just the advice to upgrade the agent which is fine but in the mean time I want to know if we are actually vulnerable or if our current ACLs protect us. 

Thanks 

[aguevara]

Its best to open a support request with this question please

Regards

Alejandro

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

[vivs]

Yeah, You are correct.

I would suggest you to open a Service Request with Support and they will help you.

Thanks