CVE-2022-0730
Under certain ldap conditions, Cacti authentication can be bypassed wi ...
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Amazon.
Beschreibung
Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| amazon linux 1 | cacti | 1.1.19-2.19.amzn1 |
| alpine 3.16 | cacti | 1.2.20-r0 |
| alpine 3.17 | cacti | 1.2.20-r0 |
| alpine 3.18 | cacti | 1.2.20-r0 |
| alpine 3.19 | cacti | 1.2.20-r0 |
| alpine 3.20 | cacti | 1.2.20-r0 |
| alpine 3.21 | cacti | 1.2.20-r0 |
| alpine 3.22 | cacti | 1.2.20-r0 |
| alpine 3.23 | cacti | 1.2.20-r0 |
| alpine 3.24 | cacti | 1.2.20-r0 |
| alpine edge | cacti | 1.2.20-r0 |
| debian 10 | cacti | 1.2.2+ds1-2+deb10u5 |
Alle 18 Einträge aus 18 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| amazon linux 1 | cacti | 1.1.19-2.19.amzn1 |
| alpine 3.16 | cacti | 1.2.20-r0 |
| alpine 3.17 | cacti | 1.2.20-r0 |
| alpine 3.18 | cacti | 1.2.20-r0 |
| alpine 3.19 | cacti | 1.2.20-r0 |
| alpine 3.20 | cacti | 1.2.20-r0 |
| alpine 3.21 | cacti | 1.2.20-r0 |
| alpine 3.22 | cacti | 1.2.20-r0 |
| alpine 3.23 | cacti | 1.2.20-r0 |
| alpine 3.24 | cacti | 1.2.20-r0 |
| alpine edge | cacti | 1.2.20-r0 |
| debian 10 | cacti | 1.2.2+ds1-2+deb10u5 |
| debian 11 | cacti | 1.2.16+ds1-2+deb11u1 |
| debian 12 | cacti | 1.2.20+ds1-1 |
| debian 13 | cacti | 1.2.20+ds1-1 |
| debian 14 | cacti | 1.2.20+ds1-1 |
| debian 9 | cacti | 0.8.8h+ds1-10+deb9u2 |
| echo | cacti | 1.2.20+ds1-1 |
Referenzen
- https://github.com/Cacti/cacti/issues/4562
- https://lists.debian.org/debian-lts-announce/2022/03/msg00038.html
- https://lists.debian.org/debian-lts-announce/2022/12/msg00039.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RVOALVZSCBFNOAAZVHTJFSFB7UDSNYQ2/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZH67CCORDEYFG7NL7G6UH47PAV2PU7BA/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZJERS4NYIGJUXEGT6ATUQA4CBYBRDLRA/
- https://www.debian.org/security/2022/dsa-5298