Improper Access Control

🗓️ 14 Oct 2022 12:44:57Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 44 Views

openssl vulnerability in improper access contro

Reporter	Title	Published	Views	Family All 86
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container Dashboard operands are vulnerable to denial of service and loss of confidentiality due to multiple vulnerabilities	25 Jul 202313:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL affects IBM Integrated Analytics System [CVE-2022-3358]	26 Sep 202414:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect AIX	24 Jan 202316:12	–	ibm
FreeBSD	OpenSSL -- Potential NULL encryption in NID_undef with Custom Cipher	11 Oct 202200:00	–	freebsd
ATTACKERKB	CVE-2022-3358	29 Sep 202200:00	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : openssl, openssl-devel, openssl-libs (ALAS2023-2023-054)	21 Mar 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : openssl (ALSA-2023:2523)	14 May 202300:00	–	nessus
Tenable Nessus	FreeBSD : OpenSSL -- Potential NULL encryption in NID_undef with Custom Cipher (7392e1e3-4eb9-11ed-856e-d4c9ef517024)	18 Oct 202200:00	–	nessus
Tenable Nessus	GLSA-202402-08 : OpenSSL: Multiple Vulnerabilities	4 Feb 202400:00	–	nessus
Tenable Nessus	MiracleLinux 9 : openssl-3.0.7-6.el9 (AXSA:2023-5373:04)	20 Jan 202600:00	–	nessus

Vulners

Node

openssl3 openssl3Match3.0.5-r0os

AND

openssl3 openssl3Match3.0.3-r0os

AND

openssl3 openssl3Match3.0.2-r0os

AND

alpinelinux alpine_linuxMatch3.16

openssl3 openssl3Match3.0.5-r0os

AND

openssl3 openssl3Match3.0.2-r0os

AND

openssl3 openssl3Match3.0.3-r0os

AND

openssl3 openssl3Match3.0.0-r3os

AND

openssl3 openssl3Match3.0.0-r4os

AND

alpinelinux alpine_linuxMatch3.15

openssl opensslMatch1.1.1d-r5os

AND

openssl opensslMatch1.1.1m-r2os

AND

openssl opensslMatch1.1.1n-r0os

AND

openssl opensslMatch1.1.1l-r0os

AND

openssl opensslMatch1.1.1o-r0os

AND

openssl opensslMatch1.1.1k-r1os

AND

openssl opensslMatch1.1.1f-r0os

AND

openssl opensslMatch1.1.1g-r0os

AND

openssl opensslMatch1.1.1e-r0os

AND

openssl opensslMatch1.1.1l-r7os

AND

openssl opensslMatch1.1.1l-r5os

AND

openssl opensslMatch1.1.1d-r4os

AND

openssl opensslMatch3.0.0-r2os

AND

openssl opensslMatch1.1.1m-r1os

AND

openssl opensslMatch1.1.1j-r0os

AND

openssl opensslMatch3.0.5-r2os

AND

openssl opensslMatch1.1.1q-r0os

AND

openssl opensslMatch1.1.1p-r0os

AND

openssl opensslMatch3.0.0-r0os

AND

openssl opensslMatch3.0.5-r1os

AND

openssl opensslMatch1.1.1m-r3os

AND

openssl opensslMatch1.1.1k-r0os

AND

alpinelinux alpine_linuxMatchedge

openssl opensslMatch1.1.1h-1debian

AND

debian debian_linuxMatch999

openssl opensslMatch3.0.5-r3os

AND

alpinelinux alpine_linuxMatch3.17

devel develMatch1.1.1f-1ubuntu3debian

AND

devel develMatch1.1.1j-1ubuntu1debian

AND

devel develMatch1.1.1f-1ubuntu4debian

AND

debian debian_linux

openssl opensslMatch1.0.0_4.el6

openssl opensslMatch1.0.0_25.el6_3.1

openssl opensslMatch1.0.0_20.el6

openssl opensslMatch1.0.2k_26.el7_9

openssl opensslMatch1.0.1e_48.el6_8.3

openssl opensslMatch1.0.0_20.el6_2.5

openssl opensslMatch1.0.0_20.el6_2.3

openssl opensslMatch1.0.1e_30.el6_6.8

openssl opensslMatch1.0.0_10.el6_1.4

openssl opensslMatch1.0.2k_16.el7_6.1

openssl opensslMatch1.0.1e_42.ael7b_1.5

openssl opensslMatch1.0.1e_48.el6

openssl opensslMatch1.0.0_10.el6_1.5

openssl opensslMatch1.0.1e_15.el6

openssl opensslMatch1.0.0_27.el6_4.2

openssl opensslMatch1.0.2k_24.el7_9

openssl opensslMatch1.0.1e_16.el6_5.7

openssl opensslMatch1.0.1e_42.ael7b_1.6

openssl opensslMatch1.0.1e_30.el6_6.5

openssl opensslMatch1.0.1e_16.el6_5.1

openssl opensslMatch1.0.0_10.el6

openssl opensslMatch1.0.1e_30.el6_6.7

openssl opensslMatch1.0.1e_30.el6_6.9

openssl opensslMatch1.0.1e_42.el6_7.2

openssl opensslMatch1.0.2k_25.el7_9

openssl opensslMatch1.0.0_20.el6_2.1

openssl opensslMatch1.0.1e_30.el6

openssl opensslMatch1.0.1e_30.el6_6.11

openssl opensslMatch1.0.1e_42.ael7b_1.8

openssl opensslMatch1.0.1e_42.ael7b_1.4

openssl opensslMatch1.0.1e_57.el6

openssl opensslMatch1.0.0_4.el6_0.2

openssl opensslMatch1.0.1e_42.ael7b_1.9

openssl opensslMatch1.0.0_20.el6_2.4

openssl opensslMatch1.0.1e_42.el6_7.4

openssl opensslMatch1.0.0_4.el6_0.1

openssl opensslMatch1.0.2k_19.el7

openssl opensslMatch1.0.1e_30.el6_6.4

openssl opensslMatch1.0.2k_22.el7_9

openssl opensslMatch1.0.1e_16.el6_5.15

openssl opensslMatch1.0.1e_16.el6_5.4

openssl opensslMatch1.0.1e_16.el6_5.14

openssl opensslMatch1.0.0_27.el6

openssl opensslMatch1.0.1e_16.el6_5

openssl opensslMatch1.0.1e_48.el6_8.4

openssl opensslMatch1.0.2k_21.el7_9

openssl opensslMatch1.0.1e_30.el6_6.2

openssl opensslMatch1.0.0_20.el6_2.2

openssl opensslMatch1.0.1e_58.el6_10

openssl opensslMatch1.0.1e_42.el6_7.1

openssl opensslMatch1.0.1e_42.el6

openssl opensslMatch1.0.2k_16.el7

openssl opensslMatch1.0.1e_48.el6_8.1

ovmf ovmfMatch20180508_3.gitee3198e672e2.el7_6.1

ovmf ovmfMatch20150414_2.gitc9e5618.el7

ovmf ovmfMatch20180508_3.gitee3198e672e2.el7

ovmf ovmfMatch20180508_6.gitee3198e672e2.el7

ovmf ovmfMatch20171011_4.git92d07e48907f.el7

Source	Link
github	www.github.com/openssl/openssl/pull/19300
github	www.github.com/openssl/openssl/commit/e00d9d59451874e8d9ae65c079dc6b07912d874d
secdb	www.secdb.alpinelinux.org/edge/main.yaml
secdb	www.secdb.alpinelinux.org/v3.16/main.yaml
secdb	www.secdb.alpinelinux.org/v3.15/main.yaml
security	www.security.gentoo.org/glsa/202402-08
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0023
security	www.security.netapp.com/advisory/ntap-20221028-0014/

04 Feb 2024 13:08Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

EPSS0.0287