CVE-2022-48538

n/a / n/a PUBLISHED

Description (CNA)

In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the PHP code: cacti_ldap_auth() allows a zero as the password.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://docs.cacti.net/Settings-Auth-LDAP.md
https://github.com/Cacti/cacti/issues/5189

ADP enrichment

CVE

No English description supplied.

https://docs.cacti.net/Settings-Auth-LDAP.md
https://github.com/Cacti/cacti/issues/5189

CISA-ADP

No English description supplied.

No references supplied.