CVE-2022-4254 | SynScan

Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2022-4254

sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters

Published: Feb 1, 2023
Updated: Apr 14, 2023
CVE: CVE-2022-4254
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWEs:

CWE-90

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
fedoraproject / sssd	1.15.3	2.3.1
redhat / enterprise_linux_desktop	7.0	7.0.x
redhat / enterprise_linux_workstation	7.0	7.0.x
redhat / enterprise_linux_for_scientific_computing	7.0	7.0.x
redhat / enterprise_linux_server	7.0	7.0.x
redhat / enterprise_linux_for_power_little_endian	7.0	7.0.x
redhat / enterprise_linux_for_power_big_endian	7.0	7.0.x
redhat / enterprise_linux_for_ibm_z_systems	7.0	7.0.x
redhat / enterprise_linux	8.0	8.0.x
redhat / enterprise_linux_server_tus	8.2	8.2.x
redhat / enterprise_linux_server_aus	8.2	8.2.x
redhat / enterprise_linux_server_update_services_for_sap_solutions	8.1	8.1.x
redhat / enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions	8.1	8.1.x
redhat / enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions	8.2	8.2.x