CVE-2022-0730 Auth bypass in Cati
Attackers can bypass authentication in Cacti under specific LDAP conditions using certain credential types, requiring patching.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-0730?
CVE-2022-0730 is a critical authentication bypass vulnerability in Cacti Cacti, published on 3 Mar 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.
Weakness: CWE-287
Which versions are affected by CVE-2022-0730?
It affects 3 products.
Linux distribution packages (7)
cacti SUSE:Package Hub 12 | All versions | 1.2.20-bp153.2.9.1 |
cacti-spine SUSE:Package Hub 12 | All versions | 1.2.20-bp153.2.9.1 |
cacti SUSE:Package Hub 15 SP3 | All versions | 1.2.20-bp153.2.9.1 |
cacti-spine SUSE:Package Hub 15 SP3 | All versions | 1.2.20-bp153.2.9.1 |
cacti openSUSE:Leap 15.3 | All versions | 1.2.20-bp153.2.9.1 |
cacti-spine openSUSE:Leap 15.3 | All versions | 1.2.20-bp153.2.9.1 |
cacti openSUSE:Tumbleweed | All versions | 1.2.20-1.1 |
Products include Cacti Cacti, Debian Debian Linux, Fedoraproject Fedora.
How do I fix CVE-2022-0730?
Apply the vendor's patch.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2022-0730 being exploited?
There is no known exploitation of CVE-2022-0730 in the wild and no public exploit code.
Other vulnerabilities in Cacti Cacti
- CVE-2022-46169 Cacti Command Injection
- CVE-2026-39893 Cacti: Pre-authentication SQL injection via rfilter RLIKE clause in graph_view.php
- CVE-2026-39938 Cacti: Unauthenticated RCE on Graph Image
- CVE-2026-39955 Cacti has Pre-Authentication SQL Injection via unanchored FILTER_VALIDATE_REGEXP in graph_view.php
- CVE-2023-39361 Unauthenticated SQL Injection in graph_view.php in Cacti
Sources
Also known as CLEANSTART-2024-WQ20488, DEBIAN-CVE-2022-0730, GHSA-6g5w-jmg4-8qxf, UBUNTU-CVE-2022-0730, openSUSE-SU-2022:0145-1, openSUSE-SU-2024:12016-1.