5.7

CVE-2022-2393

EPSS 0.24%
Veröffentlicht 14.07.2022 15:15:08
Zuletzt bearbeitet 21.11.2024 07:00:54
Erkennungen
Login

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 7 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Pki-core Project ≫ Pki-core Version <= 10.12.4

Redhat ≫ Certificate System Version 9.0

Redhat ≫ Certificate System Version 10.0

Redhat ≫ Enterprise Linux Version 6.0

Redhat ≫ Enterprise Linux Version 7.0

Redhat ≫ Enterprise Linux Version 8.0

Redhat ≫ Enterprise Linux Version 9.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.24%	0.143

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.7	2.1	3.6	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-285 Improper Authorization

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

https://bugzilla.redhat.com/show_bug.cgi?id=2101046

Third Party Advisory

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2022-2393

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-2393

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-2393

EUVD