{"id":"CVE-2022-25372","details":"Pritunl Client through 1.2.3019.52 on Windows allows local privilege escalation, related to an ACL entry for CREATOR OWNER in platform_windows.go.","modified":"2026-08-27T03:48:39.848398221Z","published":"2022-02-20T19:17:02Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/25xxx/CVE-2022-25372.json","cna_assigner":"mitre"},"references":[{"type":"WEB","url":"https://github.com/pritunl/pritunl-client-electron/blob/caa78d626198b6961f3f39eca2acd39064c2df96/CHANGES#L6"},{"type":"WEB","url":"https://rhinosecuritylabs.com/penetration-testing/cve-2022-25372-local-privilege-escalation-in-pritunl-vpn-client/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/25xxx/CVE-2022-25372.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25372"},{"type":"FIX","url":"https://github.com/pritunl/pritunl-client-electron/commit/e16d47437f8ef62546aa00edb0d64be2a7d2205b"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/pritunl/pritunl-client","events":[{"introduced":"0"},{"fixed":"219b551559ad523524d6def85110ccdcfd9bbbee"},{"fixed":"e16d47437f8ef62546aa00edb0d64be2a7d2205b"}],"database_specific":{"cpe":"cpe:2.3:a:pritunl:pritunl-client-electron:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"1.2.3019.52a"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["1.2.3019.52","1.2.2943.11","1.2.2916.18","1.2.2897.44","1.2.2799.2","1.2.2768.85","1.2.2737.2","1.2.2709.72","1.2.2685.61","1.2.2653.1","1.2.2631.70","1.2.2626.63","1.2.2624.84","1.2.2615.73","1.2.2550.20","1.2.2549.5","1.0.2440.93","1.0.2428.78","1.0.2418.61","1.0.2404.6","1.0.2395.64","1.0.2388.46","1.0.2317.40","1.0.2226.23","1.0.2207.23","1.0.2144.93","1.0.2079.9","1.0.1953.32","1.0.1952.30","1.0.1951.33","1.0.1909.80","1.0.1907.2","1.0.1889.51","1.0.1888.35","1.0.1886.21","1.0.1804.90","1.0.1782.9","1.0.1768.89","1.0.1749.25","1.0.1653.28","1.0.1632.42","1.0.1561.31","1.0.1561.29","1.0.1561.27","1.0.1543.29","1.0.1461.29","1.0.1442.97","1.0.1436.36","1.0.1435.1","1.0.1429.19","1.0.1400.11","1.0.1380.37","1.0.1364.29","1.0.1364.27","1.0.1364.22","1.0.1363.37","1.0.1361.39","1.0.1359.97","1.0.1356.36","1.0.1311.6","1.0.1304.41","1.0.1303.3","1.0.1296.88","1.0.1294.83","1.0.1294.3","1.0.1265.14","1.0.1265.1","1.0.1258.42","1.0.1223.17","1.0.1222.48","1.0.1219.32","1.0.1212.27","1.0.1210.71","1.0.1210.1","1.0.1209.98","1.0.1187.7","1.0.1177.2","1.0.1174.27","1.0.1174.20","1.0.1154.75","1.0.1149.25","1.0.1141.79","1.0.1116.6","1.0.1075.52","1.0.1070.17","0.10.19","0.10.18","0.10.17","0.10.16","0.10.15","0.10.14","0.10.13","0.10.12","0.10.11","0.10.10","0.10.9","0.10.8","0.10.7","0.10.6","0.10.5","0.10.4","0.10.3","0.10.2","0.10.1","0.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-25372.json"}}],"schema_version":"1.9.0"}