{"metadata": {"vulnerability": "CVE-2022-28128", "count": 17, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 11}}, "data": [{"timestamp": "2022-03-28T00:00:00Z", "date_only": false, "value": "2022-03-28T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-28128", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-03-31T07:21:53Z", "date_only": false, "value": "2022-03-31T07:21:53.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-28128", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-03-31T07:21:53Z", "date_only": false, "value": "2022-03-31T07:21:53.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / jpcert", "record": "CVE-2022-28128", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-03-31T08:15:00Z", "date_only": false, "value": "2022-03-31T08:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7F5W-59CW-9F92", "record": "GHSA-7F5W-59CW-9F92", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-03-31T08:15:00Z", "date_only": false, "value": "2022-03-31T08:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-28128", "record": "GSD-2022-28128", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-03-31T08:15:08.470Z", "date_only": false, "value": "2022-03-31T08:15:08.470", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-28128", "record": "FKIE_CVE-2022-28128", "field": "published"}, {"timestamp": "2022-03-31T12:18:22Z", "date_only": false, "value": "2022-03-31T12:18:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/39900", "record": "CVE-2022-28128", "field": "creation_timestamp", "uuid": "ad3ea414-47af-412c-8662-fa035b971645", "content": "\u203c CVE-2022-28128 \u203c\n\nUntrusted search path vulnerability in AttacheCase ver.3.6.1.0 and earlier allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/39900"}, {"timestamp": "2022-03-31T22:26:04Z", "date_only": false, "value": "2022-03-31T22:26:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ShizoPrivacy/216", "record": "CVE-2022-28128", "field": "creation_timestamp", "uuid": "089bbfc3-bf2d-414c-8dce-93f77d6b1381", "content": "|CVE-2022-28128|\nUntrusted search path vulnerability in AttacheCase\nAttacheCase(github)\n\n\ud83e\udda0\u0412 AttacheCase(\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432) \u0432\u0435\u0440\u0441\u0438\u0438 3.6.1.0 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c DLL \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e(\u043a \u043f\u0440\u0438\u043c\u0435\u0440\u0443 \u0442\u0440\u043e\u044f\u043d  DLL), \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043d\u0435\u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0433\u043e \u043f\u043e\u0438\u0441\u043a\u0430 \u043f\u0443\u0442\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0437\u0430\u043b\u0430\u0442\u0430\u043d\u0430 \u0438 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u044d\u0442\u043e\u0439, \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0430\u044f(AttacheCase3) \u0442\u043e\u0436\u0435 \u043f\u043e\u0444\u0438\u043a\u0448\u0435\u043d\u0430. \u0414\u043b\u044f \u0435\u0451 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0443\u0436\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\ud83e\udda0In AttacheCase(file encryption software) version 3.6.1.0 and earlier, it is possible to load the DLL insecurely (for example, a Trojan DLL), through an unreliable search path and get privileges to execute malicious code.\nThe vulnerability was patched up and thanks to the elimination of this, the previous one (AttacheCase3) is also fixed. To fix it, you just need to upgrade to the latest version.\n\n#cve", "url": "https://t.me/ShizoPrivacy/216"}, {"timestamp": "2022-04-01T00:00:43Z", "date_only": false, "value": "2022-04-01T00:00:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7F5W-59CW-9F92", "record": "GHSA-7F5W-59CW-9F92", "field": "published"}, {"timestamp": "2022-04-07T20:17:00Z", "date_only": false, "value": "2022-04-07T20:17Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-28128", "record": "GSD-2022-28128", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-04-08T00:00:29Z", "date_only": false, "value": "2022-04-08T00:00:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7F5W-59CW-9F92", "record": "GHSA-7F5W-59CW-9F92", "field": "modified"}, {"timestamp": "2023-12-13T01:19:34.227Z", "date_only": false, "value": "2023-12-13T01:19:34.227856Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-28128", "record": "GSD-2022-28128", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-06-21T02:42:00Z", "date_only": false, "value": "2024-06-21T11:42+09:00", "kind": "other", "label": "Dc:date", "source": "jvndb \u00b7 JVNDB-2022-000022", "record": "JVNDB-2022-000022", "field": "dc:date"}, {"timestamp": "2024-06-21T02:42:00Z", "date_only": false, "value": "2024-06-21T11:42+09:00", "kind": "other", "label": "Dcterms:modified", "source": "jvndb \u00b7 JVNDB-2022-000022", "record": "JVNDB-2022-000022", "field": "dcterms:modified"}, {"timestamp": "2024-08-03T05:48:36.845Z", "date_only": false, "value": "2024-08-03T05:48:36.845Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-28128", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T05:48:36.845Z", "date_only": false, "value": "2024-08-03T05:48:36.845Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-28128", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T04:38:02.007Z", "date_only": false, "value": "2026-06-17T04:38:02.007", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-28128", "record": "FKIE_CVE-2022-28128", "field": "lastModified"}]}