CVE-2022-4366 MEDIUM

CVE-2022-4366: Missing Authorization in lirantal/daloradius

Vendor Lirantal
Product lirantal/daloradius
Weakness CWE-862 · Missing authorization
Published December 8, 2022
Last update April 14, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Missing Authorization in GitHub repository lirantal/daloradius prior to master branch.

Key dates

02Disclosure timeline

December 8, 2022 CVE published
April 14, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2022-2987 Ldap WP Login / Active Directory Integration < 3.0.2 - Unauthenticated Settings Update to Auth Bypass CVE-2026-58165 OpenZiti - Privilege Escalation to Admin via Unauthorized Enrollment Creation CVE-2025-66068 WordPress InstaWP Connect plugin <= 0.1.1.9 - Broken Access Control vulnerability CVE-2025-31768 WordPress Widget Manager Light plugin <= 1.18 - Broken Access Control vulnerability CVE-2025-31732 WordPress GB Gallery Slideshow plugin <= 1.3 - Broken Access Control vulnerability