Lucene search
K

CVE-2022-45597

🗓️ 24 Mar 2023 00:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 53 Views

ComponentSpace.Saml2 4.4.0 Missing SSL Certificate Validation. NOTE: the vendor does not consider this a vulnerability because the report is only about use of certificates at the application layer (not the transport layer) and "Certificates are exchanged in a controlled fashion between entities within a trust relationship. This is why self-signed certificates may be used and why validating certificates isn’t as important as doing so for the transport layer certificates.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2022-45597
24 Mar 202323:15
attackerkb
CNNVD
ComponentSpace SAML 信任管理问题漏洞
24 Mar 202300:00
cnnvd
Cvelist
CVE-2022-45597
24 Mar 202300:00
cvelist
NVD
CVE-2022-45597
24 Mar 202323:15
nvd
OSV
CVE-2022-45597
24 Mar 202323:15
osv
Prion
Design/Logic Flaw
24 Mar 202323:15
prion
Positive Technologies
PT-2023-14715 · Componentspace · Componentspace.Saml2
24 Mar 202300:00
ptsecurity
RedhatCVE
CVE-2022-45597
23 May 202500:51
redhatcve
Snyk
Improper Certificate Validation
18 Apr 202316:00
snyk
NVD
Node
componentspacesamlMatch4.4.0asp.net

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 07:29Current
9.3High risk
Vulners AI Score9.3
CVSS 3.19.8
EPSS0.00249
53