What is CVE-2022-1949?

CVE-2022-1949 is a high-severity vulnerability in Fedoraproject Fedora, classified under Authorization Bypass Through User-Controlled Key. CVSS score: 7.5/10. Published 2022-06-02.

How severe is CVE-2022-1949?

High severity. CVSS v3 base score is 7.5 out of 10.

Auth bypass in Fedoraproject Fedora

CVE-2022-1949

An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any…

Vulnerability class: IDOR (Insecure Direct Object Reference)

EPSS: 0.014 (69.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Fedoraproject Fedora — versions 34, 35, 36
Redhat 389_directory_server
Redhat Directory_server — versions 11.0, 12.0
Redhat Enterprise_linux — versions 8.0, 9.0
N/a 389-ds-base — versions 389-ds-base-2.0

Weakness classification (CWE)

CWE-639 — Authorization Bypass Through User-Controlled Key

References

secalert@redhat.com (Patch, Third Party Advisory, x_refsource_MISC, Issue Tracking)

Frequently asked questions

What is CVE-2022-1949?: CVE-2022-1949 is a high-severity vulnerability in Fedoraproject Fedora, classified under Authorization Bypass Through User-Controlled Key. CVSS score: 7.5/10. Published 2022-06-02.
How severe is CVE-2022-1949?: High severity. CVSS v3 base score is 7.5 out of 10.