CVE-2022-35248

CVE-2022-35248

Vendor N/A
Product Rocket.Chat
Weakness CWE-287 · Improper authentication
Published September 23, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A improper authentication vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 that allowed two factor authentication can be bypassed when telling the server to use CAS during login.

Key dates

02Disclosure timeline

September 23, 2022 CVE published
August 3, 2024 Record updated