Authentication Bypass

🗓️ 16 Oct 2022 23:29:36Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 67 Views

Erlang Authentication Bypass via Improper Authenticatio

Reporter	Title	Published	Views	Family All 64
AlpineLinux	CVE-2022-37026	21 Sep 202200:00	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in Erlang	19 Jun 202611:10	–	astralinux
BDU FSTEC	The vulnerability of the OTP component in the Erlang programming language allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.	20 Jul 202300:00	–	bdu_fstec
Circl	CVE-2022-37026	15 Sep 202509:19	–	circl
CNNVD	Ericsson Erlang 授权问题漏洞	21 Sep 202200:00	–	cnnvd
CVE	CVE-2022-37026	21 Sep 202200:00	–	cve
Cvelist	CVE-2022-37026	21 Sep 202200:00	–	cvelist
Debian	[SECURITY] [DLA 3491-1] erlang security update	11 Jul 202313:23	–	debian
Debian CVE	CVE-2022-37026	21 Sep 202200:00	–	debiancve
Tenable Nessus	Debian dla-3491 : erlang - security update	11 Jul 202300:00	–	nessus

Vulners

Node

erlang erlangMatch1:23.1.4+dfsg-1debian

AND

debian debian_linuxMatch999

OR

erlang erlangMatch24.1.3-r0os

AND

erlang erlangMatch24.1.4-r0os

AND

erlang erlangMatch23.0-r0os

AND

erlang erlangMatch24.0.5-r1os

AND

erlang erlangMatch22.2.7-r0os

AND

erlang erlangMatch24.0.5-r0os

AND

erlang erlangMatch24.2.1-r0os

AND

erlang erlangMatch24.1.7-r0os

AND

erlang erlangMatch23.2.6-r0os

AND

erlang erlangMatch24.0-r0os

AND

erlang erlangMatch24.3.3-r0os

AND

erlang erlangMatch24.1.2-r0os

AND

alpinelinux alpine_linuxMatchedge

OR

erlang erlangMatch24.3.3-r0os

AND

alpinelinux alpine_linuxMatch3.16

OR

devel develMatch1:23.0.3+dfsg-1debian

AND

devel develMatch1:23.1.1+dfsg-1debian

AND

devel develMatch1:23.2.6+dfsg-1debian

AND

devel develMatch1:23.1.4+dfsg-1debian

AND

debian debian_linux

OR

erlang erlangMatch1:23.1.4+dfsg-1debian

AND

debian debian_linuxMatch11

OR

erlang erlangMatch1:21.2.6+dfsg-1debian

AND

debian debian_linuxMatch10

OR

erlang erlangMatch22.3.4.1_1.el8

OR

erlang erlangMatch21.3.8.7_1.el8ost

OR

erlang erlangMatch22.0.7_1.el8

OR

erlang erlangMatch21.3.8.13_1.el8ost

OR

erlang erlangMatch22.2.8_1.el8

OR

erlang erlangMatch20.3.8.21_1.el8at

OR

erlang erlangMatch20.3.8.24_1.el8ost

OR

erlang erlangMatch20.3.8.22_1.el8ost

OR

erlang erlangMatch21.3.8.20_1.el8ost

OR

erlang erlangMatch21.3.8.17_1.el8ost

OR

erlang erlangMatch23.3.4_1.el8ost.2

OR

erlang erlangMatch21.3.8.16_1.el8ost

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2023/07/msg00012.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-37026
erlangforums	www.erlangforums.com/c/erlang-news-announcements/91
erlangforums	www.erlangforums.com/t/otp-25-1-released/1854
github	www.github.com/erlang/otp/compare/OTP-23.3.4.14...OTP-23.3.4.15

09 Aug 2023 14:46Current

9High risk

Vulners AI Score9

CVSS 3.19.8

EPSS0.01136

erlang authentication bypass vulnerability improper client certifications external database