CVE-2022-2393 - AskarLabs CVE Database

CVE-2022-2393

Vendor N/A

Product pki-core

Weakness CWE-285

Published July 14, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

Key dates

02Disclosure timeline

July 14, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-2393 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/285.html

Related vulnerabilities

04Related CVE

CVE-2022-21196 Airspan Networks Mimosa Improper Authorization CVE-2022-2536 Transposh WordPress Translation <= 1.0.9.6 - Authorization Bypass CVE-2020-5275 Firewall configured with unanimous strategy was not actually unanimous in symfony/security-http CVE-2025-11256 Kognetiks Chatbot <= 2.3.5 - Missing Authorization to Unauthenticated Limited File Uploads and Conversation Erasing CVE-2026-32716 SciTokens: Authorization Bypass via Incorrect Scope Path Prefix Checking