CVEvulnerability

CVE-2022-29082

4.6 MEDIUM Published 2022-05-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-05-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
CVSS 3.1 ([email protected])
4.6 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
CVSS 2.0 ([email protected])
4.9 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:N
Weaknesses
CWE-295, CWE-297

Description

Dell EMC NetWorker versions 19.1.x, 19.1.0.x, 19.1.1.x, 19.2.x, 19.2.0.x, 19.2.1.x 19.3.x, 19.3.0.x, 19.4.x, 19.4.0.x, 19.5.x,19.5.0.x, 19.6 and 19.6.0.1 and 19.6.0.2 contain an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port 5671 which could allow remote attackers to spoof certificates.

Affected configurations

• dell emc networker (>= 19.1.1.0 < 19.5.0.7) • dell emc networker (>= 19.6.0 < 19.6.0.3) • dell emc networker 19.6.1

Related

Weakness · CWE (2)

  • CWE-295 Improper Certificate Validation weakness
  • CWE-297 Improper Validation of Certificate with Host Mismatch weakness

References