{"id":"CVE-2022-2188","aliases":["EUVD-2022-34472","GHSA-h7pw-cjr2-mh4p"],"status":"published","title":"DXL Broker privilege escalation vulnerability","description":"Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory controls in the logs directory. This can lead to a denial-of-service attack on the DXL Broker.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00157,"percentile":0.04881,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-732","CWE-863"],"published":"2022-11-07T11:26:55Z","modified":"2026-06-17T04:41:27Z","products":[{"vendor":"mcafee","product":"data_exchange_layer"},{"vendor":"trellix","product":"dxl broker"}],"references":[{"url":"https://kcm.trellix.com/corporate/index?page=content\u0026id=SB10383","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2188"},{"url":"https://github.com/advisories/GHSA-h7pw-cjr2-mh4p"}],"sources":{"cve":[{"id":"CVE-2022-2188","title":"DXL Broker privilege escalation vulnerability","description":"Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory controls in the logs directory. This can lead to a denial-of-service attack on the DXL Broker.\n","status":"published","published":"2022-11-07T11:26:55.535Z","modified":"2025-05-08T16:02:49.245Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:34:32.156873Z"}],"euvd":[{"id":"EUVD-2022-34472","description":"Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory controls in the logs directory. This can lead to a denial-of-service attack on the DXL Broker.\n","status":"published","published":"2022-11-07T11:26:55Z","modified":"2025-05-08T16:02:49Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T20:32:51.637681Z"}],"ghsa":[{"id":"GHSA-h7pw-cjr2-mh4p","title":"Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local...","description":"Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory controls in the logs directory. This can lead to a denial-of-service attack on the DXL Broker.","status":"published","published":"2022-11-07T19:00:22Z","modified":"2023-01-29T05:06:19Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:46:00.036476Z"}],"nvd":[{"id":"CVE-2022-2188","description":"Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory controls in the logs directory. This can lead to a denial-of-service attack on the DXL Broker.\n","status":"published","published":"2022-11-07T12:15:09.76Z","modified":"2026-06-17T04:41:27.907Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:07:31.504574Z"}]}}