CVE-2022-26563 Auth bypass in n/a

What is CVE-2022-26563?

CVE-2022-26563 is a high-severity authentication bypass vulnerability in n/a, published on 18 Jul 2023. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

An issue was discovered in Tildeslash Monit before 5.31.0, allows remote attackers to gain escilated privlidges due to improper PAM-authorization.

Weakness: CWE-863

Which versions are affected by CVE-2022-26563?

It affects 1 product.

Products include Tildeslash Monit.

How do I fix CVE-2022-26563?

Upgrade to a fixed version.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2022-26563 being exploited?

There is no known exploitation of CVE-2022-26563 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2004-1898 Memory corruption in n/a Critical 10.0
• CVE-2003-1083 Memory corruption in n/a Critical 10.0
• CVE-2019-11393 Privilege escalation in n/a Critical 9.8
• CVE-2004-1899 Memory corruption in n/a Medium 5.0
• CVE-2003-1084 Denial of service in n/a Medium 5.0

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2022-26563, GHSA-23pc-hgf6-6wwr, UBUNTU-CVE-2022-26563, USN-6571-1.