GMS-2022-7965: DSInternals Credential Roaming Elevation of Privilege Vulnerability
A vulnerability exists in the DSInternals.Common.Data.RoamedCredential.Save()
method, which incorrectly parses the msPKIAccountCredentials
LDAP attribute values. As a consequence, malicious actor would be able to modify the file system of the computer where an application using this function is executed with administrative privileges. A similar security issue used to be present in the Windows operating system, as DSInternals re-implements the Credential Roaming feature of Windows.
References
Detect and mitigate GMS-2022-7965 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →