PT-2022-19111 · Hewlett Packard · Hp Icewall Sso

Published 2022-07-08 · Updated 2022-07-18 · CVE-2022-28623

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HPE IceWall SSO version 10.0

Description Security vulnerabilities in HPE IceWall SSO could be exploited remotely to allow SQL injection or unauthorized data injection.

Recommendations For HPE IceWall SSO version 10.0, apply Patch 9 for RHEL or Patch 9 for HP-UX to resolve the vulnerabilities.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2022-28623

Affected Products

Hp Icewall Sso

References · 4

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu04330en_us · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-28623 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-28623 · Security Note
• https://t.me/cibsecurity/45808 · Telegram Post