peter bassill · operator
$ cve CVE-2022-0730 JSON

CVE-2022-0730

9.8
CRITICAL · CVSS 3.1 · EPSS 3.5% (pctl 89)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS3.5% — more likely to be exploited than 89% of all CVEs
WeaknessCWE-287
On CISA KEVno
Public exploitnone known
Published2022-03-03
Last modified2026-06-17

Affected (3)

VendorProduct
cacticacti
debiandebian linux
fedoraprojectfedora

References

→ the Explorer  ·  watch your stack  ·  NVD