CVE-2022-0730

Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.

Score

CVSS 3.1 9.8 Critical

Status

Modified - secalert@redhat.com

Published

2022-03-03

Last modified

2024-08-02

Weaknesses

CWE-287

Affected products

• Cacti (Cacti)
• Debian Linux (Debian)
• Fedora (Fedoraproject)

References

• https://github.com/Cacti/cacti/issues/4562
• https://lists.debian.org/debian-lts-announce/2022/03/msg00038.html
• https://lists.debian.org/debian-lts-announce/2022/12/msg00039.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVOALVZSCBFNOAAZVHTJFS…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZH67CCORDEYFG7NL7G6UH4…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZJERS4NYIGJUXEGT6ATUQA…
• https://www.debian.org/security/2022/dsa-5298