CVE-2022-3560
A flaw was found in pesign. The pesign package provides a systemd service used to start the...
A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.
- Record
CVE-2022-3560- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List
A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.
- Record
CVE-2022-3560- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
EUVDEUVD-2022-42926
A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.
- Record
EUVD-2022-42926- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-w2gm-3gx9-m2p2
A flaw was found in pesign. The pesign package provides a systemd service used to start the...
A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.
- Record
GHSA-w2gm-3gx9-m2p2- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
OSVAZL-13293
CVE-2022-3560 affecting package pesign 0.112-32
A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.
- Record
AZL-13293- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSV
A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.
- Record
CVE-2022-3560- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Show 18 moreShow less
OSVDEBIAN-CVE-2022-3560
A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.
- Record
DEBIAN-CVE-2022-3560- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-03
OSVOESA-2023-1119
pesign security update
pesign is a command line tool for manipulating signatures and cryptographic digests of UEFI applications.
Security Fix(es):
A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.(CVE-2022-3560)
- Record
OESA-2023-1119- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2023-1159
pesign security update
pesign is a command line tool for manipulating signatures and cryptographic digests of UEFI applications.
Security Fix(es):
A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.(CVE-2022-3560)
- Record
OESA-2023-1159- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2023:1065
Red Hat Security Advisory: pesign security update
- Record
RHSA-2023:1065- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:1066
Red Hat Security Advisory: pesign security update
- Record
RHSA-2023:1066- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:1067
Red Hat Security Advisory: pesign security update
- Record
RHSA-2023:1067- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:1093
Red Hat Security Advisory: pesign security update
- Record
RHSA-2023:1093- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:1107
Red Hat Security Advisory: pesign security update
- Record
RHSA-2023:1107- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:1572
Red Hat Security Advisory: pesign security update
- Record
RHSA-2023:1572- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:1586
Red Hat Security Advisory: pesign security update
- Record
RHSA-2023:1586- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:1829
Red Hat Security Advisory: pesign security update
- Record
RHSA-2023:1829- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2023:1572
Important: pesign security update
The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools.
Security Fix(es):
- pesign: Local privilege escalation on pesign systemd service (CVE-2022-3560)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2023:1572- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-3560
A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.
- Record
UBUNTU-CVE-2022-3560- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVALSA-2023:1067 No score
Important: pesign security update
The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools.
Security Fix(es):
- pesign: Local privilege escalation on pesign systemd service (CVE-2022-3560)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2023:1067- Updated
- 2026-11-02
OSVALSA-2023:1572 No score
Important: pesign security update
The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools.
Security Fix(es):
- pesign: Local privilege escalation on pesign systemd service (CVE-2022-3560)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2023:1572- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12672-1 No score
pesign-113-11.1 on GA media
These are all security issues fixed in the pesign-113-11.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12672-1- Updated
- 2026-11-02
OSVRLSA-2023:1067 No score
Important: pesign security update
The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools.
Security Fix(es):
- pesign: Local privilege escalation on pesign systemd service (CVE-2022-3560)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2023:1067- Updated
- 2026-11-02
OSVSUSE-SU-2023:0484-1 No score
Security update for pesign
This update for pesign fixes the following issues:
- CVE-2022-3560: Fixed pesign-authorize ExecStartPost script allowing privilege escalation from pesign to root (bsc#1202933).
- Record
SUSE-SU-2023:0484-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pesignAlmaLinux:9 |
before 115-6.el9_1 | 115-6.el9_1 |
pesignAlmaLinux:8 |
before 0.112-27.el8_7 | 0.112-27.el8_7 |
pesignAzure Linux:2 |
through 0.112-32 | None known |
pesignDebian:12 |
All versions, plus listed versions 0.112-6116-1116-2116-3116-4 Show 7 moreShow less116-5116-6116-7116-8116-8.1117-1117-2 |
None known |
pesignDebian:13 |
before 116-1 | 116-1 |
pesignDebian:14 |
before 116-1 | 116-1 |
pesignopenEuler:20.03-LTS-SP1 |
before 0.113-5.oe1 | 0.113-5.oe1 |
pesignopenEuler:20.03-LTS-SP3 |
before 0.113-5.oe1 | 0.113-5.oe1 |
pesignopenEuler:22.03-LTS |
before 0.113-6.oe2203 | 0.113-6.oe2203 |
pesignopenEuler:22.03-LTS-SP1 |
before 115-4.oe2203sp1 | 115-4.oe2203sp1 |
Show 63 moreShow less
| Package | Affected | Fixed |
|---|---|---|
pesignRed Hat:rhel_eus:9.0::appstream |
before 0:115-6.el9_0 | 0:115-6.el9_0 |
pesign-debuginfoRed Hat:rhel_eus:9.0::appstream |
before 0:115-6.el9_0 | 0:115-6.el9_0 |
pesign-debugsourceRed Hat:rhel_eus:9.0::appstream |
before 0:115-6.el9_0 | 0:115-6.el9_0 |
pesignRed Hat:rhel_eus:8.4::appstream |
before 0:0.112-25.el8_4.1 | 0:0.112-25.el8_4.1 |
pesign-debuginfoRed Hat:rhel_eus:8.4::appstream |
before 0:0.112-25.el8_4.1 | 0:0.112-25.el8_4.1 |
pesign-debugsourceRed Hat:rhel_eus:8.4::appstream |
before 0:0.112-25.el8_4.1 | 0:0.112-25.el8_4.1 |
pesignRed Hat:enterprise_linux:9::appstream |
before 0:115-6.el9_1 | 0:115-6.el9_1 |
pesign-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:115-6.el9_1 | 0:115-6.el9_1 |
pesign-debugsourceRed Hat:enterprise_linux:9::appstream |
before 0:115-6.el9_1 | 0:115-6.el9_1 |
pesignRed Hat:enterprise_linux:7::client |
before 0:0.109-11.el7_9 | 0:0.109-11.el7_9 |
pesign-debuginfoRed Hat:enterprise_linux:7::client |
before 0:0.109-11.el7_9 | 0:0.109-11.el7_9 |
pesignRed Hat:enterprise_linux:7::computenode |
before 0:0.109-11.el7_9 | 0:0.109-11.el7_9 |
pesign-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:0.109-11.el7_9 | 0:0.109-11.el7_9 |
pesignRed Hat:enterprise_linux:7::server |
before 0:0.109-11.el7_9 | 0:0.109-11.el7_9 |
pesign-debuginfoRed Hat:enterprise_linux:7::server |
before 0:0.109-11.el7_9 | 0:0.109-11.el7_9 |
pesignRed Hat:enterprise_linux:7::workstation |
before 0:0.109-11.el7_9 | 0:0.109-11.el7_9 |
pesign-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:0.109-11.el7_9 | 0:0.109-11.el7_9 |
pesignRed Hat:rhel_aus:8.2::appstream |
before 0:0.112-25.el8_2.1 | 0:0.112-25.el8_2.1 |
pesign-debuginfoRed Hat:rhel_aus:8.2::appstream |
before 0:0.112-25.el8_2.1 | 0:0.112-25.el8_2.1 |
pesign-debugsourceRed Hat:rhel_aus:8.2::appstream |
before 0:0.112-25.el8_2.1 | 0:0.112-25.el8_2.1 |
pesignRed Hat:rhel_e4s:8.2::appstream |
before 0:0.112-25.el8_2.1 | 0:0.112-25.el8_2.1 |
pesign-debuginfoRed Hat:rhel_e4s:8.2::appstream |
before 0:0.112-25.el8_2.1 | 0:0.112-25.el8_2.1 |
pesign-debugsourceRed Hat:rhel_e4s:8.2::appstream |
before 0:0.112-25.el8_2.1 | 0:0.112-25.el8_2.1 |
pesignRed Hat:rhel_tus:8.2::appstream |
before 0:0.112-25.el8_2.1 | 0:0.112-25.el8_2.1 |
pesign-debuginfoRed Hat:rhel_tus:8.2::appstream |
before 0:0.112-25.el8_2.1 | 0:0.112-25.el8_2.1 |
pesign-debugsourceRed Hat:rhel_tus:8.2::appstream |
before 0:0.112-25.el8_2.1 | 0:0.112-25.el8_2.1 |
pesignRed Hat:enterprise_linux:8::appstream |
before 0:0.112-27.el8_7 | 0:0.112-27.el8_7 |
pesign-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:0.112-27.el8_7 | 0:0.112-27.el8_7 |
pesign-debugsourceRed Hat:enterprise_linux:8::appstream |
before 0:0.112-27.el8_7 | 0:0.112-27.el8_7 |
pesignRed Hat:rhel_e4s:8.1::appstream |
before 0:0.112-25.el8_1.1 | 0:0.112-25.el8_1.1 |
pesign-debuginfoRed Hat:rhel_e4s:8.1::appstream |
before 0:0.112-25.el8_1.1 | 0:0.112-25.el8_1.1 |
pesign-debugsourceRed Hat:rhel_e4s:8.1::appstream |
before 0:0.112-25.el8_1.1 | 0:0.112-25.el8_1.1 |
pesignRed Hat:rhel_eus:8.6::appstream |
before 0:0.112-27.el8_6 | 0:0.112-27.el8_6 |
pesign-debuginfoRed Hat:rhel_eus:8.6::appstream |
before 0:0.112-27.el8_6 | 0:0.112-27.el8_6 |
pesign-debugsourceRed Hat:rhel_eus:8.6::appstream |
before 0:0.112-27.el8_6 | 0:0.112-27.el8_6 |
pesignRocky Linux:9 |
before 0:115-6.el9_1.rocky.2 | 0:115-6.el9_1.rocky.2 |
pesignRocky Linux:8 |
before 0:0.112-27.el8_7 | 0:0.112-27.el8_7 |
pesignSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 0.112-150000.4.15.1 | 0.112-150000.4.15.1 |
pesignSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 0.112-150000.4.15.1 | 0.112-150000.4.15.1 |
pesignSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 0.112-150000.4.15.1 | 0.112-150000.4.15.1 |
pesignSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS |
before 0.112-150000.4.15.1 | 0.112-150000.4.15.1 |
pesignSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before 0.112-150000.4.15.1 | 0.112-150000.4.15.1 |
pesignSUSE:Linux Enterprise Real Time 15 SP3 |
before 0.112-150000.4.15.1 | 0.112-150000.4.15.1 |
pesignSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 0.112-150000.4.15.1 | 0.112-150000.4.15.1 |
pesignSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 0.112-150000.4.15.1 | 0.112-150000.4.15.1 |
pesignSUSE:Linux Enterprise Server 15 SP3-LTSS |
before 0.112-150000.4.15.1 | 0.112-150000.4.15.1 |
pesignSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 0.112-150000.4.15.1 | 0.112-150000.4.15.1 |
pesignSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 0.112-150000.4.15.1 | 0.112-150000.4.15.1 |
pesignSUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before 0.112-150000.4.15.1 | 0.112-150000.4.15.1 |
pesignSUSE:Manager Proxy 4.2 |
before 0.112-150000.4.15.1 | 0.112-150000.4.15.1 |
pesignSUSE:Manager Server 4.2 |
before 0.112-150000.4.15.1 | 0.112-150000.4.15.1 |
pesignSUSE:Enterprise Storage 7 |
before 0.112-150000.4.15.1 | 0.112-150000.4.15.1 |
pesignSUSE:Enterprise Storage 7.1 |
before 0.112-150000.4.15.1 | 0.112-150000.4.15.1 |
pesignopenSUSE:Leap 15.4 |
before 0.112-150000.4.15.1 | 0.112-150000.4.15.1 |
pesignUbuntu:16.04:LTS |
All versions, plus listed versions 0.110-2 |
None known |
pesignUbuntu:18.04:LTS |
All versions, plus listed versions 0.112-4 |
None known |
pesignUbuntu:20.04:LTS |
All versions, plus listed versions 0.112-5 |
None known |
pesignUbuntu:22.04:LTS |
All versions, plus listed versions 0.112-6 |
None known |
pesignUbuntu:24.04:LTS |
All versions, plus listed versions 0.112-6116-6116-7 |
None known |
pesignUbuntu:25.10 |
All versions, plus listed versions 116-8116-8.1 |
None known |
pesignUbuntu:26.10 |
All versions, plus listed versions 116-8.1build1 |
None known |
pesignUbuntu:26.04:LTS |
All versions, plus listed versions 116-8.1116-8.1build1 |
None known |
pesignopenSUSE:Tumbleweed |
before 113-11.1 | 113-11.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-3560 is a medium vulnerability (CVSS 5.5) in Microsoft Pesign, published February 2, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 16th percentile. Fixed in pesign 115-6.el9_1.
References
bugzilla.redhat.com/show_bug.cgi?id=2135420
nvd.nist.gov/vuln/detail/CVE-2022-3560
github.com/advisories/GHSA-w2gm-3gx9-m2p2
access.redhat.com/errata/RHSA-2023:1067
Show 30 moreShow less
errata.almalinux.org/9/ALSA-2023-1067.html
security-tracker.debian.org/tracker/CVE-2022-3560
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1119
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1065.json
cve.org/CVERecord?id=CVE-2022-3560
errata.rockylinux.org/RLSA-2023:1067
suse.com/support/update/announcement/2023/suse-su-20230484-1
bugzilla.suse.com/1202933
ubuntu.com/security/CVE-2022-3560
openwall.com/lists/oss-security/2023/01/31/6