Lucene search

K
redhatcveRedhat.comRH:CVE-2022-24407
HistoryFeb 23, 2022 - 9:22 a.m.

CVE-2022-24407

2022-02-2309:22:54
redhat.com
access.redhat.com
49

0.003 Low

EPSS

Percentile

69.0%

A flaw was found in the SQL plugin shipped with Cyrus SASL. The vulnerability occurs due to failure to properly escape SQL input and leads to an improper input validation vulnerability. This flaw allows an attacker to execute arbitrary SQL commands and the ability to change the passwords for other accounts allowing escalation of privileges.