CVE-2022-2232

Published: Nov 14, 2024Modified: Jun 17, 2026Deferred

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: secalert@redhat.com (Secondary)

Description

A flaw was found in the Keycloak package. This flaw allows an attacker to utilize an LDAP injection to bypass the username lookup or potentially perform other malicious actions.

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (5)

https://access.redhat.com/errata/RHSA-2024:0094

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:0095

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:0096

Source: secalert@redhat.com

https://access.redhat.com/security/cve/CVE-2022-2232

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2096994

Source: secalert@redhat.com

Timeline

No history available yet.