CVE-2022-2393CWE-285

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled

published July 14, 2022

CVSS
—
EPSS
0%
Percentile
15.5
In the wild
Unconfirmed
What it is

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00251 · 15.5th percentile
Weakness
CWE-285 · Improper Authorization
Published
2022-07-14T14:53Z
EPSS history
Timeline
  • 14 JUL 14:53Z
    A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled
    cvelistv5