CVE-2022-0486

CVE-2022-0486 describes an improper file permissions vulnerability in Fidelis Network and Deception products, specifically affecting versions prior to 9.4.5. An attacker with local administrative access to the CLI can exploit this flaw to modify critical files, leading to privilege escalation equivalent to the root user. With a CVSS score of 7.8 (High), this vulnerability poses a significant risk due to its low attack complexity and high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.