CVE-2022-4991 - CVE House
Back to Database
Status published Unknown CVE-2022-4991

Tychon is vulnerable to privilege escalation due to OPENSSLDIR location

Vulnerability Description

Tychon includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory that may be controllable by an unprivileged user on Windows. Tychon contains a privileged service that uses this OpenSSL component. A user who can place a specially-crafted openssl.cnf file at an appropriate path may be able to achieve arbitrary code execution with SYSTEM privileges.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-4991

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

Affected Software

Tychon
Vulnerable Versions:
*

Timeline

Official Publish: June 1st, 2026
Last Modified: June 2nd, 2026
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.