Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2022-22187— JIMS: Local Privilege Escalation vulnerability via repair functionality

Quick assessment

Affected
Juniper Networks Juniper Identity Management Service (JIMS)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Juniper Networks Juniper Identity Management Service是美国瞻博网络（Juniper Networks）公司的一项通过基于角色验证和限制用户访问来保护公司资源的服务。 Juniper Networks Juniper Identity Management Service（JIMS） 1.4.0之前版本存在安全漏洞，该漏洞源于Windows Installer框架中存在一个不正确的权限管理漏洞。攻击者利用该漏洞触发修复操作，向Windows Install

CVSS 7.8 · High EPSS 0.29% · P19
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2022-22187

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
JIMS: Local Privilege Escalation vulnerability via repair functionality
Source: CVE Program / CVE List V5
Vulnerability Description
An Improper Privilege Management vulnerability in the Windows Installer framework used in the Juniper Networks Juniper Identity Management Service (JIMS) allows an unprivileged user to trigger a repair operation. Running a repair operation, in turn, will trigger a number of file operations in the %TEMP% folder of the user triggering the repair. Some of these operations will be performed from a SYSTEM context (started via the Windows Installer service), including the execution of temporary files. An attacker may be able to provide malicious binaries to the Windows Installer, which will be executed with high privilege, leading to a local privilege escalation. This issue affects Juniper Networks Juniper Identity Management Service (JIMS) versions prior to 1.4.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
特权管理不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Juniper Networks Juniper Identity Management Service 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Juniper Networks Juniper Identity Management Service是美国瞻博网络（Juniper Networks）公司的一项通过基于角色验证和限制用户访问来保护公司资源的服务。 Juniper Networks Juniper Identity Management Service（JIMS） 1.4.0之前版本存在安全漏洞，该漏洞源于Windows Installer框架中存在一个不正确的权限管理漏洞。攻击者利用该漏洞触发修复操作，向Windows Install
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Juniper Networks Juniper Identity Management Service (JIMS) unspecified ~ 1.4.0 -

II. Public POCs for CVE-2022-22187

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-22187

请登录查看更多情报信息。

Vendor Advisories for CVE-2022-22187 (1)

Other References for CVE-2022-22187 (1)

Same Patch Batch · Juniper Networks · 2022-04-14 · 16 CVEs total

CVE-2022-22182 8.8 HIGH Junos OS: A XSS vulnerability allows an attacker to execute commands on a target J-Web ses
CVE-2022-22181 8.0 HIGH Junos OS: J-Web can be compromised through reflected XSS attacks
CVE-2022-22198 7.5 HIGH Junos OS: MX MS-MPC or MS-MIC, or SRX SPC crashes if it receives a SIP message with a spec
CVE-2022-22197 7.5 HIGH Junos OS and Junos OS Evolved: An rpd core will be observed with proxy BGP route-target fi
CVE-2022-22195 7.5 HIGH Junos OS Evolved: Specific packets reaching the RE lead to a counter overflow and eventual
CVE-2022-22194 7.5 HIGH Junos OS Evolved: PTX series: An attacker sending a crafted GRE packet will cause the PFE
CVE-2022-22188 7.5 HIGH Junos OS: QFX5100/QFX5110/QFX5120/QFX5200/QFX5210/EX4600/EX4650 Series: When storm control
CVE-2022-22185 7.5 HIGH Junos OS: SRX Series: Denial of service vulnerability in flowd daemon upon receipt of a sp
CVE-2022-22183 7.5 HIGH Junos OS Evolved: A remote attacker may cause a CPU Denial of Service by sending genuine t
CVE-2022-22190 7.4 HIGH Paragon Active Assurance Control Center: Information disclosure vulnerability in crafted U
CVE-2022-22189 7.3 HIGH Contrail Service Orchestration: An authenticated local user may have their permissions ele
CVE-2022-22186 7.2 HIGH Junos OS: EX4650 Series: Certain traffic received by the Junos OS device on the management
CVE-2022-22196 6.5 MEDIUM Junos OS and Junos OS Evolved: The rpd CPU spikes to 100% after a malformed ISIS TLV has b
CVE-2022-22191 6.5 MEDIUM Junos OS: EX4300: PFE Denial of Service (DoS) upon receipt of a flood of specific ARP traf
CVE-2022-22193 5.5 MEDIUM Junos OS and Junos OS Evolved: In a BGP rib-sharding scenario when a certain CLI command i

IV. Related Vulnerabilities

Same vendor: Juniper Networks
Same weakness: CWE-269

V. Comments for CVE-2022-22187

No comments yet

Leave a comment