{"id":"CVE-2022-28623","state":"PUBLISHED","title":"Security vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL injection or unauthorized data injection. HPE has provided the following updated mod","description":"Security vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL injection or unauthorized data injection. HPE has provided the following updated modules to resolve these vulnerabilities. HPE IceWall SSO version 10.0 certd library Patch 9 for RHEL and HPE IceWall SSO version 10.0 certd library Patch 9 for HP-UX.","publishedAt":"2022-07-08T12:39:00.000Z","updatedAt":"2024-08-03T05:56:16.109Z","severity":null,"assigner":"hpe","products":["n/a HPE IceWall SSO"],"affected":[{"vendor":"n/a","product":"HPE IceWall SSO","versions":[{"version":"Prior to HPE IceWall SSO certd 10.0 (RHEL and HP-UX)","status":"affected"}]}],"references":["https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu04330en_us"],"weaknesses":[],"ingestedAt":"2026-10-29T19:49:55.027Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/28xxx/CVE-2022-28623.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-28623","state":"PUBLISHED","datePublished":"2022-07-08T12:39:00.000Z","dateUpdated":"2024-08-03T05:56:16.109Z","assignerShortName":"hpe","assignerOrgId":"eb103674-0d28-4225-80f8-39fb86215de0","dateReserved":"2022-04-04T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Security vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL injection or unauthorized data injection. HPE has provided the following updated modules to resolve these vulnerabilities. HPE IceWall SSO version 10.0 certd library Patch 9 for RHEL and HPE IceWall SSO version 10.0 certd library Patch 9 for HP-UX."}],"affected":[{"vendor":"n/a","product":"HPE IceWall SSO","versions":[{"version":"Prior to HPE IceWall SSO certd 10.0 (RHEL and HP-UX)","status":"affected"}]}],"references":[{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu04330en_us","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"remote sql injection; remote unauthorized data injection","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"hpe","dateUpdated":"2022-07-08T12:38:54.000Z","orgId":"eb103674-0d28-4225-80f8-39fb86215de0"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security-alert@hpe.com","ID":"CVE-2022-28623","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"HPE IceWall SSO","version":{"version_data":[{"version_value":"Prior to HPE IceWall SSO certd 10.0 (RHEL and HP-UX)"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Security vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL injection or unauthorized data injection. HPE has provided the following updated modules to resolve these vulnerabilities. HPE IceWall SSO version 10.0 certd library Patch 9 for RHEL and HPE IceWall SSO version 10.0 certd library Patch 9 for HP-UX."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"remote sql injection; remote unauthorized data injection"}]}]},"references":{"reference_data":[{"name":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu04330en_us","refsource":"MISC","url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu04330en_us"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu04330en_us","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T05:56:16.109Z"}}]}}}