CVE-2022-1466

    Dashboard / Vulnerabilities / CVE-2022-1466

    CVE-2022-1466

    Published: 26 Apr 2022Last Modified: 12 Aug 2026

    Summary:

    Details: Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted.

    References: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-076.txt, https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1466.json, https://nvd.nist.gov/vuln/detail/CVE-2022-1466, https://bugzilla.redhat.com/show_bug.cgi?id=2050228, https://www.syss.de/pentest-blog/fehlerhafte-autorisierung-bei-red-hat-single-sign-on-750ga-syss-2021-076

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -e7d2a32e9b9b2723da19b4920d84c243e8ef8c05

    Affected versions

    17.0.0-6

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-1466 | CVE-DB