Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2022-2393

Date: July 14, 2022

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

Severity Score

Related Resources (7)

https://nvd.nist.gov/vuln/detail/CVE-2022-2393
https://bugzilla.redhat.com/show_bug.cgi?id=2101046
https://access.redhat.com/security/cve/CVE-2022-2393
https://access.redhat.com/errata/RHSA-2022:7077
https://access.redhat.com/errata/RHSA-2022:7086
https://security-tracker.debian.org/tracker/CVE-2022-2393
https://www.mend.io/vulnerability-database/CVE-2022-2393

Severity Score

Weakness Type (CWE)

Authentication Issues

CWE-287

Improper Authorization

CWE-285

CVSS v3.1

Base Score:
Attack Vector (AV): ADJACENT_NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us