CVE-2022-23236

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file accessible only to privileged users.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-312

Affected software

VendorProductVersions
n/aE-Series SANtricity OS Controller Software 11.x11.40 through 11.70.2

References

Timeline

Published
Jun 2, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-232376.1E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow anCVE-2022-232386.5Linux deployments of StorageGRID (formerly StorageGRID Webscale) versions 11.6.0 through 11.6.0.2 deployed with a Linux kernel version less CVE-2022-232394.8Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability whichCVE-2022-23247.5Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service iCVE-2022-232406.5Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability whichCVE-2022-232418.1Clustered Data ONTAP versions 9.11.1 through 9.11.1P2 with SnapLock configured FlexGroups are susceptible to a vulnerability which could allCVE-2022-232424.2TeamViewer Linux versions before 15.28 do not properly execute a deletion command for the connection password in case of a process crash. KnCVE-2022-23254.8The Invitation Based Registrations WordPress plugin through 2.2.84 does not sanitise and escape some of its settings, which could allow highCVE-2022-232525.5Microsoft Office Information Disclosure VulnerabilityCVE-2022-232536.5Windows Point-to-Point Tunneling Protocol Denial of Service VulnerabilityCVE-2022-232544.9Microsoft Power BI Information Disclosure VulnerabilityCVE-2022-232555.9Microsoft OneDrive for Android Security Feature Bypass Vulnerability
CVE-2022-23236: Medium severity, CVSS 4.4 | Vulnix