CVE-2022-21818

Medium

Description

NVIDIA License System contains a vulnerability in the installation scripts for the DLS virtual appliance, where a user on a network after signing in to the portal can access other users’ credentials, allowing them to gain escalated privileges, resulting in limited impact to both confidentiality and integrity.

SeverityMedium
CVSS5.4
Exploit probability—
ProductNvidia License System
PublishedFeb 15, 2022
First seenFeb 15, 2022
Weakness typeCWE-312CWE-312

How to fix

Update
  • nvidia license_system1.1 or later

Affected products

ProductAffected versionsFixed in
nvidia license_systemv < 1.11.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.