Microsoft OneDrive for Android Security Feature Bypass Vulnerability
CVE-2022-23255 is a security feature bypass vulnerability in Microsoft OneDrive (rated Important, CVSS 5.9).
1 version
Facts
- Microsoft id
CVE-2022-23255- Products
- Microsoft OneDrive
- Severity
- Important
- Impact
- Security Feature Bypass
- CVSS
- 5.9
- CVSS vector
- CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
- Exploited
- No
- Publicly disclosed
- No
- Exploitability
- Exploitation Less Likely
- Customer action required
- Yes
- Release
- 2022-Feb
- Assigned by
- Microsoft
- MSRC revision
- 1.0
- Status pages
- OneDrive status
- First captured by us
- (from our first import of this list)
- Microsoft last modified
- Source
- Security updates · open the original at Microsoft
Microsoft's revision notes
- Revision 1.0, 2022-02-08:
Information published.
Microsoft says
According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?
What Microsoft changed
We have one version of this item so far. When Microsoft edits it (a new date, status or text), the earlier version stays here and the change is shown.
Related changes
Other changes for OneDrive
- Microsoft OneDrive for Android Information Disclosure Vulnerability
- Microsoft OneDrive for Android Information Disclosure Vulnerability
- Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability
- Microsoft OneDrive for iOS Security Feature Bypass Vulnerability
- OneDrive: Respond to access requests directly in the Share dialog · In development
- OneDrive: Command-line tool for the OneDrive sync app · In development
- OneDrive: Set a custom name for the OneDrive sync folder · Launched
- OneDrive: Improved max path error experience on desktop · In development