CVE-2022-4132

A flaw was found in JSS. A memory leak in JSS requires non-standard configuration but is a low-effort DoS vector if configured that way (repeatedly hitting the login page).

Score

CVSS 3.1 5.9 Medium

Status

Modified - secalert@redhat.com

Published

2023-10-04

Last modified

2024-09-19

Weaknesses

CWE-401

Affected products

• Network Security Services For Java (Dogtagpki)
• Extra Packages For Enterprise Linux (Fedora)
• Fedora (Fedora)
• Enterprise Linux (Redhat)
• Jboss Enterprise Web Server (Redhat)

References

• https://access.redhat.com/security/cve/CVE-2022-4132
• https://bugzilla.redhat.com/show_bug.cgi?id=2147372