SecuritySpace - CVE-2022-1949

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2022-1949

Description: An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.

Test IDs: 1.3.6.1.4.1.25623.1.1.2.2022.2264 1.3.6.1.4.1.25623.1.1.10.2022.0239 1.3.6.1.4.1.25623.1.1.2.2022.2601 1.3.6.1.4.1.25623.1.1.2.2022.2453

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2022-1949
https://bugzilla.redhat.com/show_bug.cgi?id=2091781
https://bugzilla.redhat.com/show_bug.cgi?id=2091781

CVE ID:	CVE-2022-1949
Description:	An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.
Test IDs:	1.3.6.1.4.1.25623.1.1.2.2022.2264 1.3.6.1.4.1.25623.1.1.10.2022.0239 1.3.6.1.4.1.25623.1.1.2.2022.2601 1.3.6.1.4.1.25623.1.1.2.2022.2453
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2022-1949 https://bugzilla.redhat.com/show_bug.cgi?id=2091781 https://bugzilla.redhat.com/show_bug.cgi?id=2091781