CVE-2022-1466
CVE-2022-1466
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
26 Apr 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted.
Affected products
n/a · rhssoWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →