CVE-2022-0730
Under certain ldap conditions, Cacti authentication can be bypassed wi ...
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Amazon.
Açıklama
Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| amazon linux 1 | cacti | 1.1.19-2.19.amzn1 |
| alpine 3.16 | cacti | 1.2.20-r0 |
| alpine 3.17 | cacti | 1.2.20-r0 |
| alpine 3.18 | cacti | 1.2.20-r0 |
| alpine 3.19 | cacti | 1.2.20-r0 |
| alpine 3.20 | cacti | 1.2.20-r0 |
| alpine 3.21 | cacti | 1.2.20-r0 |
| alpine 3.22 | cacti | 1.2.20-r0 |
| alpine 3.23 | cacti | 1.2.20-r0 |
| alpine 3.24 | cacti | 1.2.20-r0 |
| alpine edge | cacti | 1.2.20-r0 |
| debian 10 | cacti | 1.2.2+ds1-2+deb10u5 |
18 kaynaktaki 18 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| amazon linux 1 | cacti | 1.1.19-2.19.amzn1 |
| alpine 3.16 | cacti | 1.2.20-r0 |
| alpine 3.17 | cacti | 1.2.20-r0 |
| alpine 3.18 | cacti | 1.2.20-r0 |
| alpine 3.19 | cacti | 1.2.20-r0 |
| alpine 3.20 | cacti | 1.2.20-r0 |
| alpine 3.21 | cacti | 1.2.20-r0 |
| alpine 3.22 | cacti | 1.2.20-r0 |
| alpine 3.23 | cacti | 1.2.20-r0 |
| alpine 3.24 | cacti | 1.2.20-r0 |
| alpine edge | cacti | 1.2.20-r0 |
| debian 10 | cacti | 1.2.2+ds1-2+deb10u5 |
| debian 11 | cacti | 1.2.16+ds1-2+deb11u1 |
| debian 12 | cacti | 1.2.20+ds1-1 |
| debian 13 | cacti | 1.2.20+ds1-1 |
| debian 14 | cacti | 1.2.20+ds1-1 |
| debian 9 | cacti | 0.8.8h+ds1-10+deb9u2 |
| echo | cacti | 1.2.20+ds1-1 |
Referanslar
- https://github.com/Cacti/cacti/issues/4562
- https://lists.debian.org/debian-lts-announce/2022/03/msg00038.html
- https://lists.debian.org/debian-lts-announce/2022/12/msg00039.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RVOALVZSCBFNOAAZVHTJFSFB7UDSNYQ2/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZH67CCORDEYFG7NL7G6UH47PAV2PU7BA/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZJERS4NYIGJUXEGT6ATUQA4CBYBRDLRA/
- https://www.debian.org/security/2022/dsa-5298