CVE-2022-0730
Under certain ldap conditions, Cacti authentication can be bypassed wi ...
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, Amazon.
Descripción
Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| amazon linux 1 | cacti | 1.1.19-2.19.amzn1 |
| alpine 3.16 | cacti | 1.2.20-r0 |
| alpine 3.17 | cacti | 1.2.20-r0 |
| alpine 3.18 | cacti | 1.2.20-r0 |
| alpine 3.19 | cacti | 1.2.20-r0 |
| alpine 3.20 | cacti | 1.2.20-r0 |
| alpine 3.21 | cacti | 1.2.20-r0 |
| alpine 3.22 | cacti | 1.2.20-r0 |
| alpine 3.23 | cacti | 1.2.20-r0 |
| alpine 3.24 | cacti | 1.2.20-r0 |
| alpine edge | cacti | 1.2.20-r0 |
| debian 10 | cacti | 1.2.2+ds1-2+deb10u5 |
Mostrar las 18 entradas de 18 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| amazon linux 1 | cacti | 1.1.19-2.19.amzn1 |
| alpine 3.16 | cacti | 1.2.20-r0 |
| alpine 3.17 | cacti | 1.2.20-r0 |
| alpine 3.18 | cacti | 1.2.20-r0 |
| alpine 3.19 | cacti | 1.2.20-r0 |
| alpine 3.20 | cacti | 1.2.20-r0 |
| alpine 3.21 | cacti | 1.2.20-r0 |
| alpine 3.22 | cacti | 1.2.20-r0 |
| alpine 3.23 | cacti | 1.2.20-r0 |
| alpine 3.24 | cacti | 1.2.20-r0 |
| alpine edge | cacti | 1.2.20-r0 |
| debian 10 | cacti | 1.2.2+ds1-2+deb10u5 |
| debian 11 | cacti | 1.2.16+ds1-2+deb11u1 |
| debian 12 | cacti | 1.2.20+ds1-1 |
| debian 13 | cacti | 1.2.20+ds1-1 |
| debian 14 | cacti | 1.2.20+ds1-1 |
| debian 9 | cacti | 0.8.8h+ds1-10+deb9u2 |
| echo | cacti | 1.2.20+ds1-1 |
Referencias
- https://github.com/Cacti/cacti/issues/4562
- https://lists.debian.org/debian-lts-announce/2022/03/msg00038.html
- https://lists.debian.org/debian-lts-announce/2022/12/msg00039.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RVOALVZSCBFNOAAZVHTJFSFB7UDSNYQ2/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZH67CCORDEYFG7NL7G6UH47PAV2PU7BA/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZJERS4NYIGJUXEGT6ATUQA4CBYBRDLRA/
- https://www.debian.org/security/2022/dsa-5298