CVE-2022-0730
Under certain ldap conditions, Cacti authentication can be bypassed wi ...
Sévérité par source
Le label propre à Trivy est CRITICAL. Critique selon NVD, Amazon.
Description
Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| amazon linux 1 | cacti | 1.1.19-2.19.amzn1 |
| alpine 3.16 | cacti | 1.2.20-r0 |
| alpine 3.17 | cacti | 1.2.20-r0 |
| alpine 3.18 | cacti | 1.2.20-r0 |
| alpine 3.19 | cacti | 1.2.20-r0 |
| alpine 3.20 | cacti | 1.2.20-r0 |
| alpine 3.21 | cacti | 1.2.20-r0 |
| alpine 3.22 | cacti | 1.2.20-r0 |
| alpine 3.23 | cacti | 1.2.20-r0 |
| alpine 3.24 | cacti | 1.2.20-r0 |
| alpine edge | cacti | 1.2.20-r0 |
| debian 10 | cacti | 1.2.2+ds1-2+deb10u5 |
Afficher les 18 entrées de 18 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| amazon linux 1 | cacti | 1.1.19-2.19.amzn1 |
| alpine 3.16 | cacti | 1.2.20-r0 |
| alpine 3.17 | cacti | 1.2.20-r0 |
| alpine 3.18 | cacti | 1.2.20-r0 |
| alpine 3.19 | cacti | 1.2.20-r0 |
| alpine 3.20 | cacti | 1.2.20-r0 |
| alpine 3.21 | cacti | 1.2.20-r0 |
| alpine 3.22 | cacti | 1.2.20-r0 |
| alpine 3.23 | cacti | 1.2.20-r0 |
| alpine 3.24 | cacti | 1.2.20-r0 |
| alpine edge | cacti | 1.2.20-r0 |
| debian 10 | cacti | 1.2.2+ds1-2+deb10u5 |
| debian 11 | cacti | 1.2.16+ds1-2+deb11u1 |
| debian 12 | cacti | 1.2.20+ds1-1 |
| debian 13 | cacti | 1.2.20+ds1-1 |
| debian 14 | cacti | 1.2.20+ds1-1 |
| debian 9 | cacti | 0.8.8h+ds1-10+deb9u2 |
| echo | cacti | 1.2.20+ds1-1 |
Références
- https://github.com/Cacti/cacti/issues/4562
- https://lists.debian.org/debian-lts-announce/2022/03/msg00038.html
- https://lists.debian.org/debian-lts-announce/2022/12/msg00039.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RVOALVZSCBFNOAAZVHTJFSFB7UDSNYQ2/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZH67CCORDEYFG7NL7G6UH47PAV2PU7BA/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZJERS4NYIGJUXEGT6ATUQA4CBYBRDLRA/
- https://www.debian.org/security/2022/dsa-5298