Vulnerability CVE-2022-4254
Published: 2023-02-01

Description:
sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters

Type:

CWE-90

 (Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection'))

 References:
https://access.redhat.com/security/cve/CVE-2022-4254
https://github.com/SSSD/sssd/issues/5135
https://bugzilla.redhat.com/show_bug.cgi?id=2149894
https://github.com/SSSD/sssd/commit/a2b9a84460429181f2a4fa7e2bb5ab49fd561274
Copyright 2026, cxsecurity.com

 

Back to Top