CVE-2022-23242 TeamViewer Linux - Deletion command not properly executed after process crash
An attacker with local access or knowledge of a crashed session's password can reuse the un-deleted credential to establish a remote connection.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2022-23242?
CVE-2022-23242 is a medium-severity vulnerability in TeamViewer for Linux, published on 23 Mar 2022. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
TeamViewer Linux versions before 15.28 do not properly execute a deletion command for the connection password in case of a process crash. Knowledge of the crash event and the TeamViewer ID as well as either possession of the pre-crash connection password or local authenticated access to the machine would have allowed to establish a remote connection by reusing the not properly deleted connection password.
Weakness: CWE-404
Which versions are affected by CVE-2022-23242?
It affects 1 product.
Products include Teamviewer Teamviewer.
How do I fix CVE-2022-23242?
No fix has been published for CVE-2022-23242 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-23242 being exploited?
There is no known exploitation of CVE-2022-23242 in the wild and no public exploit code.
Other vulnerabilities in TeamViewer for Linux
Sources
Also known as GHSA-7pjm-32wq-qq8w.