CVE-2022-0996 Auth bypass in 389-ds-base
Attackers can use expired passwords to bypass authentication and access the 389 Directory Server database.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-0996?
CVE-2022-0996 is a medium-severity authentication bypass vulnerability in Fedoraproject Fedora, published on 23 Mar 2022. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.
Weakness: CWE-287
Which versions are affected by CVE-2022-0996?
It affects 3 products.
Linux distribution packages (13)
389-ds-base Red Hat:directory_server:11.6::el8 | All versions | 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33 |
389-ds-base-debuginfo Red Hat:directory_server:11.6::el8 | All versions | 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33 |
389-ds-base-debugsource Red Hat:directory_server:11.6::el8 | All versions | 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33 |
389-ds-base-devel Red Hat:directory_server:11.6::el8 | All versions | 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33 |
389-ds-base-legacy-tools Red Hat:directory_server:11.6::el8 | All versions | 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33 |
389-ds-base-legacy-tools-debuginfo Red Hat:directory_server:11.6::el8 | All versions | 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33 |
389-ds-base-libs Red Hat:directory_server:11.6::el8 | All versions | 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33 |
389-ds-base-libs-debuginfo Red Hat:directory_server:11.6::el8 | All versions | 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33 |
389-ds-base-snmp Red Hat:directory_server:11.6::el8 | All versions | 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33 |
389-ds-base-snmp-debuginfo Red Hat:directory_server:11.6::el8 | All versions | 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33 |
cockpit-389-ds Red Hat:directory_server:11.6::el8 | All versions | 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33 |
python3-lib389 Red Hat:directory_server:11.6::el8 | All versions | 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33 |
389-ds openSUSE:Tumbleweed | All versions | 2.0.14~git25.e6431d959-1.1 |
Products include Fedoraproject Fedora, Redhat 389 Directory Server, Redhat Enterprise Linux.
How do I fix CVE-2022-0996?
Apply the vendor's patch.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2022-0996 being exploited?
There is no known exploitation of CVE-2022-0996 in the wild and no public exploit code.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as DEBIAN-CVE-2022-0996, GHSA-w87j-439w-p9f3, RHBA-2022:7929, UBUNTU-CVE-2022-0996, openSUSE-SU-2024:11952-1.