CVE-2022-35248

🗓️ 23 Sep 2022 18:28:12Reported by hackeroneType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 55 Views

Improper authentication vulnerability in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 allows bypass of two factor authentication using CAS

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2022-35248	23 Sep 202219:15	–	attackerkb
CNNVD	Rocket.Chat 授权问题漏洞	23 Sep 202200:00	–	cnnvd
CNVD	Rocket.Chat Authorization Issues Vulnerability (CNVD-2022-70584)	26 Sep 202200:00	–	cnvd
Cvelist	CVE-2022-35248	23 Sep 202218:28	–	cvelist
Hacker One	Rocket.Chat: TOTP 2 Factor Authentication Bypass	12 Jan 202222:25	–	hackerone
NVD	CVE-2022-35248	23 Sep 202219:15	–	nvd
Prion	Authentication flaw	23 Sep 202219:15	–	prion
Positive Technologies	PT-2022-22655 · Unknown · Rocket.Chat	23 Sep 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-35248	9 Jan 202610:39	–	redhatcve

NVD

Vulners

Node

rocket.chat rocket.chatRange<4.7.5

rocket.chat rocket.chatRange4.8.0–4.8.2

[
  {
    "product": "Rocket.Chat",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in versions 4.7.5, 4.8.2, 5.0.0>"
      }
    ]
  }
]