PT-2022-3690 · Unknown · Red Base Database

Published 2022-04-04 · Updated 2022-04-04

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Red Database versions (affected versions not specified)

Description The issue is related to the improper neutralization of equivalent special elements in the Red Database management system. This could allow a remote attacker to provide false data when querying by Distinguished Name using special characters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-76

Related Identifiers

BDU:2022-04477

Affected Products

Red Base Database

References · 2

• https://bdu.fstec.ru/vul/2022-04477 · Security Note
• https://reddatabase.ru/secupdate · Note