← voltar
CVE-2022-1466

CVE-2022-1466

EPSS 1.0%CWE-863
Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted.
Produtos afetados
n/a · rhsso

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://bugzilla.redhat.com/show_bug.cgi?id=2050228https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-076.txthttps://www.syss.de/pentest-blog/fehlerhafte-autorisierung-bei-red-hat-single-sign-on-750ga-syss-2021-076