Ubuntu.comUB:CVE-2022-2393CVE-2022-2393
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
Confidence
High
EPSS
Percentile
12.6%
A flaw was found in pki-core, which could allow a user to get a certificate
for another user identity when directory-based authentication is enabled.
This flaw allows an authenticated attacker on the adjacent network to
impersonate another user within the scope of the domain, but they would not
be able to decrypt message content.
Notes
| Author | Note |
|---|---|
| gianz | As of today (2024-06-27) no fix has been published. |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | dogtag-pki | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | dogtag-pki | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | dogtag-pki | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | dogtag-pki | < any | UNKNOWN |
Related
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
Confidence
High
EPSS
Percentile
12.6%