Vulnerability in NT Auth Module of OpenAM Affects Users
CVE-2022-34298

5.3MEDIUM

Key Information:

Vendor

Openidentityplatform

Status
Openam
Vendor
CVE Published:
23 June 2022

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 45%

What is CVE-2022-34298?

A vulnerability in the NT auth module of OpenAM prior to version 14.6.6 allows attackers to exploit the system via a technique known as a 'replace Samba username attack.' This puts user accounts at risk by potentially allowing unauthorized access to sensitive systems and data. Users of affected versions are encouraged to upgrade to 14.6.6 or later to mitigate this risk.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2022-34298
Created by watchtowrlabs

References

https://github.com/OpenIdentityPlatform/OpenAM/pull/514
x_refsource_MISC
https://github.com/OpenIdentityPlatform/OpenAM/compare/14...
x_refsource_MISC
https://github.com/OpenIdentityPlatform/OpenAM/releases/t...
x_refsource_MISC

EPSS Score

45% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability Reserved

.