CVE-2022-25372

Name of the Vulnerable Software and Affected Versions Pritunl Client versions 1.2.3019.52 and earlier

Description The issue allows local privilege escalation, related to an ACL entry for CREATOR OWNER in platform windows.go. This affects Pritunl Client on Windows.

Recommendations For Pritunl Client version 1.2.3019.52 and earlier, consider updating to a version that fixes the local privilege escalation issue, although the specific fixed version is not provided in the available data. As a temporary workaround, consider restricting access to the vulnerable ACL entry for CREATOR OWNER in platform windows.go until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.