← Database

CVE-2022-24407

HIGH CVSS: 8.8 Published: 2022-02-24 Modified: 2026-06-17

Description

In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.

Affected Platforms

Netapp Ontap Select Deploy Administration UtilityOracle Communications Cloud Native Core ConsoleOracle Communications Cloud Native Core Network Function Cloud Native EnvironmentOracle Communications Cloud Native Core Security Edge Protection ProxyFedoraproject FedoraDebian Debian LinuxNetapp Active Iq Unified ManagerCyrusimap Cyrus-Sasl

Weakness Type

CWE-89

References