Vulnerabilidades de Tychon
CVEs publicadas que afetam produtos de Tychon: 1 registro(s), com severidade, exploração e correções.
CVE-2022-4991
Alta · 7.4
01/06/2026
Tychon is vulnerable to privilege escalation due to OPENSSLDIR location
Tychon includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory that may be controllable by an unprivileged user on Windows. Tychon contains a privileged service that uses this OpenSSL component. A user who can place a specially-crafted openssl.cnf file at an appropriate path may be able to achieve arbitrary code execution with SYSTEM privileges.