Veracode Vulnerability DatabaseVERACODE:34876Authentication Bypass
0.004 Low
EPSS
Percentile
75.2%
cacti is vulnerable to authentication bypass. The vulnerability exists under certain ldap conditions which allows an attacker to bypass cacti authentication.
References
github.com/Cacti/cacti/issues/4562
lists.debian.org/debian-lts-announce/2022/03/msg00038.html
lists.debian.org/debian-lts-announce/2022/12/msg00039.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVOALVZSCBFNOAAZVHTJFSFB7UDSNYQ2/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZH67CCORDEYFG7NL7G6UH47PAV2PU7BA/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZJERS4NYIGJUXEGT6ATUQA4CBYBRDLRA/
lists.fedoraproject.org/archives/list/[email protected]/message/RVOALVZSCBFNOAAZVHTJFSFB7UDSNYQ2/
lists.fedoraproject.org/archives/list/[email protected]/message/ZH67CCORDEYFG7NL7G6UH47PAV2PU7BA/
lists.fedoraproject.org/archives/list/[email protected]/message/ZJERS4NYIGJUXEGT6ATUQA4CBYBRDLRA/
security-tracker.debian.org/tracker/CVE-2022-0730
www.debian.org/security/2022/dsa-5298
Related
