PT-2022-28077 · Isode · Isode M-Vault

Published 2022-12-21 · Updated 2022-12-28 · CVE-2022-47581

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Isode M-Vault versions 16.0v0 through 17.x before 17.0v24

Description The issue causes Isode M-Vault to crash when it receives an LDAP v1 bind request.

Recommendations For versions 16.0v0 through 17.x before 17.0v24, update to version 17.0v24 or later to resolve the issue.

Fix

Related Identifiers

CVE-2022-47581

Affected Products

Isode M-Vault

References · 5

• https://isode.com/support/security/advisory/m-vault-denial-of-service-21-12-2022.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-47581 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-47581 · Security Note
• https://t.me/cibsecurity/55063 · Telegram Post
• https://t.me/cvenotify/40361 · Telegram Post