CVE-2022-0730: Critical severity Cacti Cacti vulnerability
Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/cactito a version that resolves this vulnerability.Fixed in 1.2.24+ds1-1+deb12u5Fixed in 1.2.30+ds1-1Fixed in 1.2.31+ds1-4 - Upgrade
Upgrade
alpine/cactito a version that resolves this vulnerability.Fixed in 1.2.20-r0 - Upgrade
Upgrade
debian/cactito a version that resolves this vulnerability.Fixed in 1.2.20+ds1-1
Event History
Frequently Asked Questions
What is CVE-2022-0730?
CVE-2022-0730 is a vulnerability in Cacti that allows bypassing authentication under certain LDAP conditions.
How does CVE-2022-0730 affect Cacti?
CVE-2022-0730 affects Cacti version 1.2.19.
How does CVE-2022-0730 affect Debian Linux?
CVE-2022-0730 affects Debian Linux versions 9.0, 10.0, and 11.0.
What is the severity of CVE-2022-0730?
CVE-2022-0730 has a severity rating of critical (9.8).
How do I fix CVE-2022-0730 in Cacti?
To fix CVE-2022-0730 in Cacti, update to version 1.2.25+ds1-2 or a later version.
How do I fix CVE-2022-0730 in Debian Linux?
To fix CVE-2022-0730 in Debian Linux, apply the appropriate updates: 1.2.2+ds1-2+deb10u5, 1.2.16+ds1-2+deb11u1, 1.2.24+ds1-1, or 1.2.25+ds1-2.
What is the CWE classification of CVE-2022-0730?
CVE-2022-0730 is classified as CWE-287.