EncryptInterceptor does not provide complete protection on insecure networks
45Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 73%
from disclosure to weapon49 days
Published on NVDMay 12
1st PoC+49d
exploitation probability
73%top 1% of all CVEs
observed exploitation
nono source reports it
4 public exploit(s)
What the vendors declare (VEX)
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Red HatVEX document ↗
Affected
16 products (41 components)
Red Hat Enterprise Linux 6 · Red Hat Enterprise Linux 7 · Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 9 · Red Hat OpenStack Platform 13 (Queens) · and others 11
workaround: For customers who use clustering on an untrusted network and require full protection, an alternate solution is recommended such as using a VPN.
Not affected
1 product — because the vulnerable code is not present in the product
Red Hat JBoss Web Server 6
The documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor incorrectly stated it enabled Tomcat clustering to run over an untrusted network. This was not correct. While the EncryptInterceptor does provide confidentiality and integrity protection, it does not protect against all risks associated with running over any untrusted network, particularly DoS risks.
Affected products
Apache Software Foundation · Apache Tomcatpublic PoCs found — 4
exploitdbwww.exploit-db.com/exploits/51262unverifiedgithubgithub.com/quynhlab/CVE-2022-29885★ 5githubgithub.com/iveresk/CVE-2022-29885★ 4cve_referencepacketstormsecurity.com/files/171728/Apache-Tomcat-10.1-Denial-Of-Service.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://packetstormsecurity.com/files/171728/Apache-Tomcat-10.1-Denial-Of-Service.htmlhttps://lists.apache.org/thread/2b4qmhbcyqvc7dyfpjyx54c03x65vhcvhttps://lists.debian.org/debian-lts-announce/2022/10/msg00029.htmlhttps://security.netapp.com/advisory/ntap-20220629-0002/https://www.debian.org/security/2022/dsa-5265https://www.oracle.com/security-alerts/cpujul2022.html