PT-2022-6593 · Red Hat+5 · 389 Directory Server+6

Sandipan Roy · Published 2022-03-21 · Updated 2025-01-20 · CVE-2022-0996

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions 389 Directory Server (affected versions not specified)

Description The issue is related to improper authentication in the 389 Directory Server, allowing expired passwords to access the database. This can be exploited by a remote attacker to gain access to confidential data. The vulnerability is associated with incorrect session expiration.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Insufficient Session Expiration

Weakness Enumeration

CWE-287

CWE-613

Related Identifiers

ALSA-2022:5823

ALSA-2022:8162

BDU:2023-02636

CESA-2022_5239

CESA-2022_5823

CVE-2022-0996

DLA-3399-1

DLA-4021-1

MGASA-2022-0134

OPENSUSE-SU-2022:1100-1

OPENSUSE-SU-2022_1100-1

OPENSUSE-SU-2024:11952-1

RHSA-2022:5239

RHSA-2022:5620

RHSA-2022:5823

RHSA-2022:8162

RHSA-2022:8976

RHSA-2022_5239

RHSA-2022_5823

RHSA-2022_8162

RLSA-2022:5823

RLSA-2022:8162

SUSE-SU-2022:1100-1

SUSE-SU-2022:1102-1

SUSE-SU-2022:1139-1

SUSE-SU-2022:2163-1

Affected Products

389 Directory Server

Almalinux

Astra Linux

Centos

Red Hat

Rocky Linux

Suse

References · 81

• 🔥 https://github.com/ByteHackr/389-ds-base · Exploit
• https://osv.dev/vulnerability/MGASA-2022-0134 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:8162 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4021-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-0996 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-0996 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-02636 · Security Note
• https://osv.dev/vulnerability/ALSA-2022:8162 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0426SE17 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-0996 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2022-5823.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-0996 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-0996 · Security Note
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0727SE47 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1102-1 · Vendor Advisory