# CVEs published 2022-04-01

102 CVEs were published on April 1, 2022: 8 critical, 44 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2022-25160](https://cve.now/CVE-2022-25160.md): Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Elec (no CVSS, Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU; Mitsubi…)
- [CVE-2022-25158](https://cve.now/CVE-2022-25158.md): Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Elec (no CVSS, Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU; Mitsubi…)
- [CVE-2022-25159](https://cve.now/CVE-2022-25159.md): Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electri (no CVSS, Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU; Mitsubi…)
- [CVE-2022-25157](https://cve.now/CVE-2022-25157.md): Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions (no CVSS, Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU; Mitsubi…)
- [CVE-2022-25155](https://cve.now/CVE-2022-25155.md): Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions (no CVSS, Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU; Mitsubi…)
- [CVE-2022-25156](https://cve.now/CVE-2022-25156.md): Use of Weak Hash vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX (no CVSS, Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU; Mitsubi…)
- [CVE-2022-1068](https://cve.now/CVE-2022-1068.md): Modbus Tools Modbus Slave Stack-Based Buffer Overflow (CVSS 5.5, Modbus Tools Modbus Slave)
- [CVE-2022-26419](https://cve.now/CVE-2022-26419.md): Rockwell Automation Studio 5000 Logix Designer Code Injection (CVSS 7.8, Omron CX-Position)
- [CVE-2022-26022](https://cve.now/CVE-2022-26022.md): Rockwell Automation Studio 5000 Logix Designer Out-of-Bounds Write (CVSS 7.8, Omron CX-Position)
- [CVE-2022-26417](https://cve.now/CVE-2022-26417.md): Rockwell Automation Studio 5000 Logix Designer Use After Free (CVSS 7.8, Omron CX-Position)
- [CVE-2022-25959](https://cve.now/CVE-2022-25959.md): Rockwell Automation Studio 5000 Logix Designer Improper Restriction of Operations within the Bounds of a Memory Buffer (CVSS 7.8, Omron CX-Position)
- [CVE-2020-14479](https://cve.now/CVE-2020-14479.md): ICSA-20-147-01 Inductive Automation Ignition (Update B) (CVSS 5.3, Inductive Automation Ignition 7 Gateway · Inductive Automat…)
- [CVE-2022-1159](https://cve.now/CVE-2022-1159.md): Rockwell Automation Studio 5000 Logix Designer Code Injection (CVSS 7.7, Rockwell Automation Studio 5000 Logix Designer)
- [CVE-2021-28504](https://cve.now/CVE-2021-28504.md): On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol fi ... (CVSS 7.5, Arista Networks EOS)
- [CVE-2022-27534](https://cve.now/CVE-2022-27534.md): Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released before 12 March 2022 had a bug in a (no CVSS, Kaspersky Anti-Virus products for home and Kaspersky Endpoi…)
- [CVE-2021-27223](https://cve.now/CVE-2021-27223.md): A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for home and Kaspersky Endpoint S (no CVSS, Kaspersky Anti-Virus products for home and Kaspersky Endpoi…)
- [CVE-2021-20295](https://cve.now/CVE-2021-20295.md): It was discovered that the update for the virt:rhel module in the RHSA-2020:4676 (https://access.redhat.com/errata/RHSA-2020:4676) erratum r (no CVSS, QEMU)
- [CVE-2021-3461](https://cve.now/CVE-2021-3461.md): A flaw was found in keycloak where keycloak may fail to logout user session if the logout request comes from external SAML identity provider (no CVSS, keycloak · org.keycloak:keycloak-parent)
- [CVE-2021-32503](https://cve.now/CVE-2021-32503.md): Unauthenticated users can access sensitive web URLs through GET request, which should be restricted to maintenance users only. (no CVSS, SICK FTMg)
- [CVE-2021-22277](https://cve.now/CVE-2021-22277.md): AC 800M MMS - Denial of Service vulnerability in MMS communication (CVSS 7.5, ABB 800xA, Control Software for AC · ABB Control Builder… +2)
- [CVE-2021-26624](https://cve.now/CVE-2021-26624.md): eScan Anti-Virus Local privilege escalation Vulnerability (CVSS 7.8, MicroWorld Technologies eScan Anti-Virus for Linux)
- [CVE-2021-26623](https://cve.now/CVE-2021-26623.md): Bandisoft ARK Library Out-of-bound Vulnerability (CVSS 7.8, Bandisoft International Bandizip)
- [CVE-2022-0741](https://cve.now/CVE-2022-0741.md): Improper input validation in all versions of GitLab CE/EE using sendmail to send emails allowed an attacker to steal environment variables v (CVSS 5.8, GitLab)
- [CVE-2022-0425](https://cve.now/CVE-2022-0425.md): A DNS rebinding vulnerability in the Irker IRC Gateway integration in all versions of GitLab CE/EE since version 7.9 allows an attacker to t (CVSS 5.4, GitLab)
- [CVE-2021-39908](https://cve.now/CVE-2021-39908.md): In all versions of GitLab CE/EE starting from 0.8.0 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting (CVSS 6.5, GitLab)
- [CVE-2022-0373](https://cve.now/CVE-2022-0373.md): Improper access control in GitLab CE/EE versions 12.4 to 14.5.4, 14.5 to 14.6.4, and 12.6 to 14.7.1 allows project non-members to retrieve t (CVSS 4.3, GitLab)
- [CVE-2022-0390](https://cve.now/CVE-2022-0390.md): Improper access control in Gitlab CE/EE versions 12.7 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1 allowed for project non-members to retri (CVSS 4.3, GitLab)
- [CVE-2022-0489](https://cve.now/CVE-2022-0489.md): An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . (CVSS 3.5, GitLab)
- [CVE-2021-23288](https://cve.now/CVE-2021-23288.md): Security issues in Intelligent Power Protector (CVSS 5.6, Eaton Intelligent Power Protector)
- [CVE-2021-23287](https://cve.now/CVE-2021-23287.md): Security issues in Intelligent Power Manager (IPM 1) (CVSS 5.6, Eaton Intelligent Power Manager)
- [CVE-2022-22950](https://cve.now/CVE-2022-22950.md): n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL exp (no CVSS, Spring Framework · org.springframework:spring-expression)
- [CVE-2022-22965](https://cve.now/CVE-2022-22965.md): A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. (CVSS 9.8, KEV, Spring Framework · org.springframework:spring-beans +4)
- [CVE-2021-3847](https://cve.now/CVE-2021-3847.md): An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsystem was found in the w (no CVSS, kernel)
- [CVE-2019-14839](https://cve.now/CVE-2019-14839.md): It was observed that while login into Business-central console, HTTP request discloses sensitive information like username and password when (no CVSS, Business-central)
- [CVE-2021-23247](https://cve.now/CVE-2021-23247.md): A command injection vulerability found in quick game engine allows arbitrary remote code in quick app. (no CVSS, OPPO Quick App)
- [CVE-2021-20238](https://cve.now/CVE-2021-20238.md): It was found in OpenShift Container Platform 4 that ignition config, served by the Machine Config Server, can be accessed externally from cl (no CVSS, openshift/machine-config-operator)
- [CVE-2022-1018](https://cve.now/CVE-2022-1018.md): ICSA-22-088-01 Rockwell Automation ISaGRAF (CVSS 5.5, Rockwell Automation Connected Component Workbench · Rock… +1)
- [CVE-2022-0922](https://cve.now/CVE-2022-0922.md): ICSMA-22-088-01 Philips e-Alert (CVSS 6.5, Philips e-Alert)
- [CVE-2022-1098](https://cve.now/CVE-2022-1098.md): Delta Electronics DIAEnergie Uncontrolledly Search Path Element (CVSS 7.8, DIAEnerrgie DIAEnergie)
- [CVE-2021-33018](https://cve.now/CVE-2021-33018.md): Philips Vue PACS Use of a Broken or Risky Cryptographic Algorithm (CVSS 7.5, Philips Vue PACS · Philips Vue MyVue +2)
- [CVE-2021-33022](https://cve.now/CVE-2021-33022.md): Philips Vue PACS Cleartext Transmission of Sensitive Information (CVSS 7.5, Philips Vue PACS · Philips Vue MyVue +2)
- [CVE-2021-27497](https://cve.now/CVE-2021-27497.md): Philips Vue PACS Protection Mechanism Failure (CVSS 6.5, Philips Vue PACS · Philips Vue MyVue +2)
- [CVE-2021-33024](https://cve.now/CVE-2021-33024.md): Philips Vue PACS Insufficiently Protected Credentials (CVSS 3.7, Philips Vue PACS · Philips Vue MyVue +2)
- [CVE-2021-33020](https://cve.now/CVE-2021-33020.md): Philips Vue PACS Use of a Key Past its Expiration Date (CVSS 8.2, Philips Vue PACS · Philips Vue MyVue +2)
- [CVE-2021-27501](https://cve.now/CVE-2021-27501.md): Philips Vue PACS Improper Adherence to Coding Standards (CVSS 7.5, Philips Vue PACS · Philips Vue MyVue +2)
- [CVE-2021-27493](https://cve.now/CVE-2021-27493.md): Philips Vue PACS (CVSS 6.1, Philips Vue PACS · Philips Vue MyVue +2)
- [CVE-2021-32976](https://cve.now/CVE-2021-32976.md): Moxa NPort IAW5000A-I/O Series Serial Device Server Stack-based Buffer Overflow (CVSS 9.8, Moxa NPort IAW5000A-I/O series firmware)
- [CVE-2021-32970](https://cve.now/CVE-2021-32970.md): Moxa NPort IAW5000A-I/O Series Serial Device Server Improper Input Validation (CVSS 7.5, Moxa NPort IAW5000A-I/O series firmware)
- [CVE-2021-32974](https://cve.now/CVE-2021-32974.md): Moxa NPort IAW5000A-I/O Series Serial Device Server Improper Input Validation (CVSS 9.8, Moxa NPort IAW5000A-I/O series firmware)
- [CVE-2021-32968](https://cve.now/CVE-2021-32968.md): Moxa NPort IAW5000A-I/O Series Serial Device Server Classic Buffer Overflow (CVSS 7.5, Moxa NPort IAW5000A-I/O Series firmware)
- [CVE-2021-32960](https://cve.now/CVE-2021-32960.md): Rockwell Automation FactoryTalk Services Platform Protection Mechanism Failure (CVSS 8.5, Rockwell Automation FactoryTalk Services Platform)
- [CVE-2021-32945](https://cve.now/CVE-2021-32945.md): MDT AutoSave Inadequate Encryption Strength (CVSS 7.5, MDT Software MDT AutoSave · MDT Software AutoSave for Sy… +1)
- [CVE-2021-32949](https://cve.now/CVE-2021-32949.md): MDT AutoSave Relative Path Traversal (CVSS 7.5, MDT Software MDT AutoSave · MDT Software AutoSave for Sy… +1)
- [CVE-2021-32957](https://cve.now/CVE-2021-32957.md): MDT AutoSave Uncontrolled Search Path Element (CVSS 7.5, MDT Software MDT AutoSave · MDT Software AutoSave for Sy… +1)
- [CVE-2021-32937](https://cve.now/CVE-2021-32937.md): MDT AutoSave Generation of Error Message Containing Sensitive Information (CVSS 7.5, MDT Software MDT AutoSave · MDT Software AutoSave for Sy… +1)
- [CVE-2021-32933](https://cve.now/CVE-2021-32933.md): MDT AutoSave Command Injection (CVSS 10.0, MDT Software MDT AutoSave · MDT Software AutoSave for Sy… +1)
- [CVE-2021-32953](https://cve.now/CVE-2021-32953.md): MDT AutoSave SQL Injection (CVSS 9.8, MDT Software MDT AutoSave · MDT Software AutoSave for Sy… +1)
- [CVE-2021-32961](https://cve.now/CVE-2021-32961.md): MDT AutoSave Unrestricted Upload of File with Dangerous Type (CVSS 7.5, MDT Software MDT AutoSave · MDT Software AutoSave for Sy… +1)
- [CVE-2022-27177](https://cve.now/CVE-2022-27177.md): A Python format string issue leading to information disclosure and potentially remote code execution in ConsoleMe for all versions prior to (no CVSS, ConsoleMe)
- [CVE-2022-22570](https://cve.now/CVE-2022-22570.md): A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s (UA Lite) firmware (Version 3.8.28.24 and earlier) allows a mal (no CVSS, UniFi Door Access Reader Lite)
- [CVE-2022-21830](https://cve.now/CVE-2022-21830.md): A blind self XSS vulnerability exists in RocketChat LiveChat \<v1.9 that could allow an attacker to trick a victim pasting malicious code in (no CVSS, Rocket.chat Livechat · @rocket.chat/livechat)
- [CVE-2022-26565](https://cve.now/CVE-2022-26565.md): A cross-site scripting (XSS) vulnerability in Totaljs all versions before commit 95f54a5commit, allows attackers to execute arbitrary web sc (no CVSS)
- [CVE-2022-24426](https://cve.now/CVE-2022-24426.md): Dell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation Vulnerability in the Advanced D (CVSS 7.8, Dell Command Update)
- [CVE-2022-23158](https://cve.now/CVE-2022-23158.md): Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability. (CVSS 6.0, Dell Wyse Device Agent)
- [CVE-2022-23157](https://cve.now/CVE-2022-23157.md): Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability. (CVSS 4.4, Dell Wyse Device Agent)
- [CVE-2022-23156](https://cve.now/CVE-2022-23156.md): Wyse Device Agent version 14.6.1.4 and below contain an Improper Authentication vulnerability. (CVSS 6.0, Dell Wyse Device Agent)
- [CVE-2022-23155](https://cve.now/CVE-2022-23155.md): Dell Wyse Management Suite versions 2.0 through 3.5.2 contain an unrestricted file upload vulnerability. (CVSS 7.2, Dell Wyse Management Suite)
- [CVE-2022-24066](https://cve.now/CVE-2022-24066.md): Command Injection (CVSS 8.1, simple-git)
- [CVE-2022-1207](https://cve.now/CVE-2022-1207.md): Out-of-bounds read in radareorg/radare2 (CVSS 6.6, radareorg/radare2)
- [CVE-2022-21223](https://cve.now/CVE-2022-21223.md): Command Injection (CVSS 8.1, cocoapods-downloader)
- [CVE-2022-24440](https://cve.now/CVE-2022-24440.md): Command Injection (CVSS 8.1, cocoapods-downloader)
- [CVE-2022-22404](https://cve.now/CVE-2022-22404.md): IBM App Connect Enterprise Certified Container Dashboard UI (IBM App Connect Enterprise Certified Container 1.5, 2.0, 2.1, 3.0, and 3.1) may (CVSS 6.5, IBM App Connect Enterprise Certified Container)
- [CVE-2022-22332](https://cve.now/CVE-2022-22332.md): IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user due to missing revocation mechanism for th (CVSS 5.6, IBM Sterling Partner Engagement Manager)
- [CVE-2022-22331](https://cve.now/CVE-2022-22331.md): IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information or modify user deta (CVSS 5.4, IBM SterlingPartner Engagement Manager)
- [CVE-2022-22328](https://cve.now/CVE-2022-22328.md): IBM SterlingPartner Engagement Manager 6.2.0 could allow a malicious user to elevate their privileges and perform unintended operations to a (CVSS 6.2, IBM SterlingPartner Engagement Manager)
- [CVE-2022-22327](https://cve.now/CVE-2022-22327.md): IBM UrbanCode Deploy (UCD) 7.0.5, 7.1.0, 7.1.1, and 7.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to (CVSS 5.9, IBM UrbanCode Deploy)
- [CVE-2022-21235](https://cve.now/CVE-2022-21235.md): Command Injection (CVSS 8.1, github.com/Masterminds/vcs)
- [CVE-2021-44135](https://cve.now/CVE-2021-44135.md): pagekit all versions, as of 15-10-2021, is vulnerable to SQL Injection via Comment listing. (no CVSS, pagekit/pagekit)
- [CVE-2022-24181](https://cve.now/CVE-2022-24181.md): Cross-site scripting (XSS) via Host Header injection in PKP Open Journals System 2.4.8 \>= 3.3 allows remote attackers to inject arbitary cod (no CVSS)
- [CVE-2021-36776](https://cve.now/CVE-2021-36776.md): Steve API proxy impersonation (CVSS 8.8, SUSE Rancher · github.com/rancher/rancher)
- [CVE-2021-36775](https://cve.now/CVE-2021-36775.md): Deleting PRTBs associated to a group doesn't cause deletion of corresponding RoleBindings (CVSS 8.8, SUSE Rancher · github.com/rancher/rancher)
- [CVE-2022-21947](https://cve.now/CVE-2022-21947.md): rancher desktop: Dashboard API is network accessible (CVSS 8.3, SUSE Rancher)
- [CVE-2022-25017](https://cve.now/CVE-2022-25017.md): Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field. (CVSS 9.1)
- [CVE-2021-35117](https://cve.now/CVE-2021-35117.md): An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity (CVSS 8.2, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-35115](https://cve.now/CVE-2021-35115.md): Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon Mobile (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Mobile)
- [CVE-2021-35110](https://cve.now/CVE-2021-35110.md): Possible buffer overflow to improper validation of hash segment of file while allocating memory in Snapdragon Connectivity, Snapdragon Mobil (CVSS 8.1, Qualcomm Snapdragon Connectivity, Snapdragon Mobile)
- [CVE-2021-35106](https://cve.now/CVE-2021-35106.md): Possible out of bound read due to improper length calculation of WMI message. (CVSS 7.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-35105](https://cve.now/CVE-2021-35105.md): Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-35103](https://cve.now/CVE-2021-35103.md): Possible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon A (CVSS 7.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-35089](https://cve.now/CVE-2021-35089.md): Possible buffer overflow due to lack of input IB amount validation while processing the user command in Snapdragon Auto (CVSS 8.4, Qualcomm Snapdragon Auto)
- [CVE-2021-35088](https://cve.now/CVE-2021-35088.md): Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon C (CVSS 8.2, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30333](https://cve.now/CVE-2021-30333.md): Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Co (CVSS 7.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30332](https://cve.now/CVE-2021-30332.md): Possible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrag (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30331](https://cve.now/CVE-2021-30331.md): Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Auto, Snapdragon Compute (CVSS 5.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30329](https://cve.now/CVE-2021-30329.md): Possible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrag (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30328](https://cve.now/CVE-2021-30328.md): Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1950](https://cve.now/CVE-2021-1950.md): Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute (CVSS 7.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1942](https://cve.now/CVE-2021-1942.md): Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon (CVSS 9.3, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-25691](https://cve.now/CVE-2020-25691.md): A flaw was found in darkhttpd. (no CVSS, darkhttpd)
- [CVE-2021-33657](https://cve.now/CVE-2021-33657.md): There is a heap overflow problem in video/SDL\_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. (no CVSS, SDL2)
- [CVE-2022-22963](https://cve.now/CVE-2022-22963.md): In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to (CVSS 9.8, KEV, Spring Cloud Function · org.springframework.cloud:spring-cl…)
- [CVE-2022-26562](https://cve.now/CVE-2022-26562.md): An issue in provider/libserver/ECKrbAuth.cpp of Kopano Core \<= v11.0.2.51 contains an issue which allows attackers to authenticate even if t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-04-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.