PT-2022-2422 · Unknown+4 · Follow-Redirects+4

Published 2022-01-10 · Updated 2026-04-28 · CVE-2022-0155

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions follow-redirects (affected versions not specified)

Description The issue is related to errors in handling cookies, which can allow a remote attacker to gain unauthorized access to protected information. This can lead to exposure of private personal information to an unauthorized actor.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-359

Related Identifiers

AZL-44112

BDU:2022-02815

CVE-2022-0155

GHSA-74FJ-2J2H-C42Q

OPENSUSE-SU-2024:12723-1

RHSA-2022:8502

SUSE-RU-2024:0511-1

SUSE-SU-2023:2575-1

SUSE-SU-2023:2578-1

SUSE-SU-2023:2579-1

SUSE-SU-2024:0191-1

SUSE-SU-2024:0196-1

SUSE-SU-2024:0486-1

SUSE-SU-2024:0487-1

USN-8217-1

Affected Products

Linuxmint

Red Os

Suse

Ubuntu

Follow-Redirects

References · 188

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0155.json · Exploit
• 🔥 https://huntr.dev/bounties/fc524e4b-ebb6-427d-ab67-a64181020406 · Exploit
• https://github.com/follow-redirects/follow-redirects/commit/8b347cbcef7c7b72a6e9be20f5710c17d6163c22 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-0155 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf · Patch
• https://bdu.fstec.ru/vul/2022-02815 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:12723-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:0196-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-0155 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8217-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8217-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:0487-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-RU-2024:0511-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-0155 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-0155 · Vendor Advisory