CVE-2022-4132
04.10.2023, 12:15
A flaw was found in JSS. A memory leak in JSS requires non-standard configuration but is a low-effort DoS vector if configured that way (repeatedly hitting the login page).Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| dogtagpki | network_security_services_for_java | 𝑥 < 5.5.0 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| tomcat6 |
| ||||||||||||||||||
| tomcat7 |
| ||||||||||||||||||
| tomcat8 |
| ||||||||||||||||||
| tomcat9 |
|
Amazon Linux Releases
Amazon Package | |||
|---|---|---|---|
| tomcat7 |
| ||
| tomcat7-admin-webapps |
| ||
| tomcat7-docs-webapp |
| ||
| tomcat7-el-2.2-api |
| ||
| tomcat7-javadoc |
| ||
| tomcat7-jsp-2.2-api |
| ||
| tomcat7-lib |
| ||
| tomcat7-log4j |
| ||
| tomcat7-servlet-3.0-api |
| ||
| tomcat7-webapps |
|
Common Weakness Enumeration