CVE-2022-43685

n/a / n/a PUBLISHED

Description (CNA)

CKAN through 2.9.6 account takeovers by unauthenticated users when an existing user id is sent via an HTTP POST request. This allows a user to take over an existing account including superuser accounts.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://ckan.org/
https://ckan.org/blog/get-latest-patch-releases-your-ckan-site-october-2022

ADP enrichment

CVE

No English description supplied.

https://ckan.org/
https://ckan.org/blog/get-latest-patch-releases-your-ckan-site-october-2022

CISA-ADP

No English description supplied.

No references supplied.