CVE-2022-4132

Summary

A flaw was found in JSS. A memory leak in JSS requires non-standard configuration but is a low-effort DoS vector if configured that way (repeatedly hitting the login page).

Affected Software

Weaknesses

• CWE-401: Missing Release of Memory after Effective Lifetime

ADP Enrichment

CVE Program Container

Additional References

• https://access.redhat.com/security/cve/CVE-2022-4132
• https://bugzilla.redhat.com/show_bug.cgi?id=2147372

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://access.redhat.com/security/cve/CVE-2022-4132
• https://bugzilla.redhat.com/show_bug.cgi?id=2147372

• ←Previous
• Next→