CVE-2022-29134
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published May 10, 2022
Updated: Jan 2, 2025
Summary
CVE-2022-29134 is a vulnerability affecting Windows Clustered Shared Volumes (CSV). This issue allows an unauthenticated attacker to gain sensitive information through specially crafted requests, potentially leading to data exposure. The vulnerability exists due to inadequate input validation, enabling an attacker to access CSV information, including disk metadata and file names. Microsoft released a patch to address this issue, urging users to install it promptly to mitigate the risk of data disclosure.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows Server 2016
- Microsoft Windows Server 2012
- Windows Server 2022
- Microsoft Windows Server 2019
- Microsoft Windows Server 2012 R2
Affected Vendors
- Microsoft