CVE-2022-23909 – Sherpa Connector Service v2020.2.20328.2050 - Unquoted Service Path

https://notcve.org/view.php?id=CVE-2022-23909

04 Apr 2022 — There is an unquoted service path in Sherpa Connector Service (SherpaConnectorService.exe) 2020.2.20328.2050. This might allow a local user to escalate privileges by creating a "C:\Program Files\Sherpa Software\Sherpa.exe" file. Se presenta una ruta de servicio no citada en Sherpa Connector Service (SherpaConnectorService.exe) 2020.2.20328.2050. Esto podría permitir a un usuario local escalar privilegios mediante la creación de un archivo "C:\NProgram Files\Sherpa Software\Sherpa.exe" Sherpa Connector Servi... • https://www.exploit-db.com/exploits/50852 • CWE-428: Unquoted Search Path or Element •