Lucene search

K
cvelistRedhatCVELIST:CVE-2022-4254
HistoryFeb 01, 2023 - 12:00 a.m.

CVE-2022-4254

2023-02-0100:00:00
CWE-90
redhat
www.cve.org
sssd
cve-2022-4254
certificate data
sanitization
ldap filters

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.7%

sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "SSSD",
    "versions": [
      {
        "version": "Affects SSSD 1.15.3, Fixed in SSSD 2.3.1",
        "status": "affected"
      }
    ]
  }
]

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.7%