EUVD-2022-2698

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

OpenSSL 3.0's RC4-MD5 ciphersuite misuses AAD data as MAC key, allowing man-in-the-middle attacks.

Reporter	Title	Published	Views	Family All 74
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus are vulnerable to multiple openSSL vulnerabilities in Node.js (CVE-2022-1434, CVE-2022-1343, CVE-2022-1473)	4 Jul 202213:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerabilities [CVE-2022-1434, CVE-2022-1343, CVE-2022-1292, CVE-2022-1473]	12 Jul 202311:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar WinCollect is vulnerable to using components with known vulnerabilities	17 Jun 202218:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Tivoli Netcool System Service Monitors/Application Service Monitors	8 Jul 202217:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to issues in OpenSSL (CVE-2022-1434, CVE-2022-1343, CVE-2022-1292, CVE-2022-1473 )	1 Feb 202315:37	–	ibm
Tenable Nessus	Amazon Linux 2022 : openssl (ALAS2022-2022-104)	7 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : openssl, openssl-devel, openssl-libs (ALAS2022-2022-195)	5 Nov 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : openssl, openssl-devel, openssl-libs (ALAS2023-2023-051)	21 Mar 202300:00	–	nessus
Tenable Nessus	FreeBSD : OpenSSL -- Multiple vulnerabilities (fceb2b08-cb76-11ec-a06f-d4c9ef517024)	4 May 202200:00	–	nessus
Tenable Nessus	OpenSSL 3.0.0 < 3.0.3 Multiple Vulnerabilities	3 May 202200:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "847b08e8-3e66-34ba-bc02-d88f020e15c5",
        "vendor": {
          "name": "OpenSSL"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "55f7a706-dd6a-3889-9473-7090e9402332",
        "product": {
          "name": "OpenSSL"
        },
        "product_version": "Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2)"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-1434
github	www.github.com/github/advisory-database/issues/405
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf
git	www.git.openssl.org/gitweb/
rustsec	www.rustsec.org/advisories/RUSTSEC-2022-0026.html
security	www.security.netapp.com/advisory/ntap-20220602-0009
openssl	www.openssl.org/news/secadv/20220503.txt
suse	www.suse.com/security/cve/CVE-2022-1434.html
ubuntu	www.ubuntu.com/security/CVE-2022-1434
git	www.git.openssl.org/gitweb/

03 Oct 2025 20:07Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.15.9

CVSS 24.3

EPSS0.00067