CVE-2022-2232

creationtimestamp| type| source ---|---|--- 2024-11-14 14:55:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113481884933073861 2024-11-14 16:39:44+00:00| seen| https://t.me/cvedetector/10965...

CVE-2022-2232

CVE-2022-2232 concerns a LDAP injection in Keycloak’s username lookup, allowing bypass and potentially other actions. Affected: Keycloak package; root cause: LDAP injection during username lookup. Impact: high confidentiality risk; no user interaction required, network vector, privileges not requ...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.2, <=1.4.11), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.2, <=1.4.11) +28 more potentially affected by CVE-2022-2232 via org.keycloak:keycloak-ldap-federation (>=1.0-beta-4, <=23.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version =1.0-beta-4, =1.3.2, =1.3.2, =1.3.2, =1.3.2, =1.3.2, =1.3.2, =1.3.2, =1.3.2, =1.3.2, =0.1.0, =0.2, =1.0.0, =12.0.0, =1.0-beta-4, =18.0.0, =23.0.0 and more Source cves: CVE-2022-2232 Source advisory: MEND:CVE-2022-2232...

CVE-2022-2232 Keycloak: ldap injection on username input

A flaw was found in the Keycloak package. This flaw allows an attacker to utilize an LDAP injection to bypass the username lookup or potentially perform other malicious actions...

org.keycloak:keycloak-services (4.8.2.final) potentially affected by CVE-2022-2232 via org.keycloak:keycloak-ldap-federation (4.8.2.final)

org.keycloak:keycloak-ldap-federation MAVEN version 4.8.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-services 4.8.2.final Source cves: CVE-2022-2232 Source...

com.charlyghislain.keycloak:keycloak-importexport (12.0.0), com.github.vzakharchenko:chillispot-radius-plugin (1.3.5) +26 more potentially affected by CVE-2022-2232 via org.keycloak:keycloak-services (12.0.4)

org.keycloak:keycloak-services MAVEN version 12.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.charlyghislain.keycloak:keycloak-importexport 12.0.0 -...

org.keycloak:keycloak-dependencies-server-all (3.4.0.cr1), org.keycloak:keycloak-server-feature-pack (3.4.0.cr1) +2 more potentially affected by CVE-2022-2232 via org.keycloak:keycloak-ldap-federation (3.4.0.cr1)

org.keycloak:keycloak-ldap-federation MAVEN version 3.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.4.0.cr1 -...

org.keycloak:keycloak-dependencies-server-all (1.9.1.final), org.keycloak:keycloak-dependencies-server-min (1.9.1.final) +2 more potentially affected by CVE-2022-2232 via org.keycloak:keycloak-services (1.9.1.final)

org.keycloak:keycloak-services MAVEN version 1.9.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.1.final -...

org.keycloak:keycloak-dependencies-server-min (4.0.0.final), org.keycloak:keycloak-model-jpa (4.0.0.final) +2 more potentially affected by CVE-2022-2232 via org.keycloak:keycloak-services (4.0.0.final)

org.keycloak:keycloak-services MAVEN version 4.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-min 4.0.0.final - org.keycloak:keycloak-model-jpa...

org.keycloak:keycloak-services (4.2.0.final) potentially affected by CVE-2022-2232 via org.keycloak:keycloak-ldap-federation (4.2.0.final)

org.keycloak:keycloak-ldap-federation MAVEN version 4.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-services 4.2.0.final Source cves: CVE-2022-2232 Source...

org.keycloak:keycloak-authz-policy-drools (3.1.0.cr1), org.keycloak:keycloak-dependencies-server-all (3.1.0.cr1) +4 more potentially affected by CVE-2022-2232 via org.keycloak:keycloak-services (3.1.0.cr1)

org.keycloak:keycloak-services MAVEN version 3.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.1.0.cr1 -...

org.keycloak:keycloak-dependencies-server-all (1.3.1.final) potentially affected by CVE-2022-2232 via org.keycloak:keycloak-ldap-federation (1.3.1.final)

org.keycloak:keycloak-ldap-federation MAVEN version 1.3.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.3.1.final Source cves:...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.0.beta2), org.keycloak:keycloak-account-freemarker (1.0-beta-4) +3 more potentially affected by CVE-2022-2232 via org.keycloak:keycloak-services (1.0-beta-4)

org.keycloak:keycloak-services MAVEN version 1.0-beta-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.0.beta2 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.6), com.github.vzakharchenko:cisco-radius-plugin (1.3.6) +15 more potentially affected by CVE-2022-2232 via org.keycloak:keycloak-ldap-federation (13.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 13.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.6 -...

org.keycloak:keycloak-authz-policy-drools (3.3.0.cr2), org.keycloak:keycloak-dependencies-server-all (3.3.0.cr2) +6 more potentially affected by CVE-2022-2232 via org.keycloak:keycloak-services (3.3.0.cr2)

org.keycloak:keycloak-services MAVEN version 3.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.3.0.cr2 -...

io.phasetwo.keycloak:keycloak-orgs (>=0.37, <=0.39), org.keycloak:keycloak-dependencies-server-all (22.0.0) +7 more potentially affected by CVE-2022-2232 via org.keycloak:keycloak-ldap-federation (22.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - io.phasetwo.keycloak:keycloak-orgs =0.37, =0.39 -...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=0.10.9-21.1.1, <=0.11.4-21.1.1), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=0.10.9-21.1.1, <=0.11.4-21.1.1) +32 more potentially affected by CVE-2022-2232 via org.keycloak:keycloak-services (21.1.1)

org.keycloak:keycloak-services MAVEN version 21.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =0.10.9-21.1.1, =0.10.9-21.1.1, =0.13, =0.9,...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.17, <=1.3.18), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.17, <=1.3.18) +16 more potentially affected by CVE-2022-2232 via org.keycloak:keycloak-ldap-federation (16.1.0)

org.keycloak:keycloak-ldap-federation MAVEN version 16.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.17, =1.3.17, =1.3.17, =1.3.17...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.6), com.github.vzakharchenko:cisco-radius-plugin (1.4.6) +18 more potentially affected by CVE-2022-2232 via org.keycloak:keycloak-ldap-federation (18.0.2)

org.keycloak:keycloak-ldap-federation MAVEN version 18.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.6 -...

com.charlyghislain.keycloak:keycloak-importexport (21.0.0), de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=0.10.1-21.0.1, <=0.10.8-21.0.1) +34 more potentially affected by CVE-2022-2232 via org.keycloak:keycloak-services (21.0.1)

org.keycloak:keycloak-services MAVEN version 21.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.charlyghislain.keycloak:keycloak-importexport 21.0.0 -...