CVE-2022-4132

Опубликовано: 04 окт. 2023

Источник: nvd

CVSS3: 5.9

EPSS Низкий

Описание

A flaw was found in JSS. A memory leak in JSS requires non-standard configuration but is a low-effort DoS vector if configured that way (repeatedly hitting the login page).

Ссылки

https://access.redhat.com/security/cve/CVE-2022-4132
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2147372
Issue Tracking
Patch
https://access.redhat.com/security/cve/CVE-2022-4132
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2147372
Issue Tracking
Patch

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:dogtagpki:network_security_services_for_java:*:*:*:*:*:*:*:*

Версия до 5.5.0 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 21%

0.00066

Низкий

5.9 Medium

CVSS3

Дефекты

CWE-401

Связанные уязвимости

CVE-2022-4132

CVSS3: 5.9

ubuntu

около 2 лет назад

A flaw was found in JSS. A memory leak in JSS requires non-standard configuration but is a low-effort DoS vector if configured that way (repeatedly hitting the login page).

CVE-2022-4132

CVSS3: 5.9

redhat

почти 3 года назад

A flaw was found in JSS. A memory leak in JSS requires non-standard configuration but is a low-effort DoS vector if configured that way (repeatedly hitting the login page).

CVE-2022-4132

CVSS3: 5.9

debian

около 2 лет назад

A flaw was found in JSS. A memory leak in JSS requires non-standard co ...

ROS-20251020-08

CVSS3: 5.9

redos

15 дней назад

Уязвимость jss

GHSA-hcff-4p4q-xjmc

CVSS3: 5.9

github

около 2 лет назад

A flaw was found in JSS. A memory leak in JSS requires non-standard configuration but is a low-effort DoS vector if configured that way (repeatedly hitting the login page).

EPSS

Процентиль: 21%

0.00066

Низкий

5.9 Medium

CVSS3

Дефекты

CWE-401