Withdrawn or rejected on
Its source no longer considers this a valid vulnerability. It stays here so links keep working, and it is left out of feeds.
- cvss
- —
- not scored
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- —
- no EPSS score yet
- public exploits
- 0
- none known
Summary
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
Is CVE-2022-45046 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerVendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2022-45046 updated
camel-ldap: LDAP Injection on camel-ldap component when using the filter option
-
Red Hat build of Apache Camel for Spring Boot 3 org.apache.camel-camel org.apache.camel-camel Red Hat build of Quarkus io.quarkus.platform-quarkus-platform-config io.quarkus.platform-quarkus-platform-config Red Hat Fuse 7 org.apache.camel-camel org.apache.camel-camel, com.redhat.fuse.eap-fuse-eap com.redhat.fuse.eap-fuse-eap, org.wildfly.camel-wildfly-camel org.wildfly.camel-wildfly-camel, org.wildfly.camel.example-example-camel org.wildfly.camel.example-example-camel Red Hat Integration Camel K 1 org.apache.camel-camel org.apache.camel-camel, org.apache.camel.quarkus-camel-quarkus org.apache.camel.quarkus-camel-quarkus, org.apache.camel.kafkaconnector-camel-kafka-connector-aggregator org.apache.camel.kafkaconnector-camel-kafka-connector-a Red Hat Integration Camel Quarkus 1 org.apache.camel-camel org.apache.camel-camel Red Hat JBoss Fuse 6 org.apache.camel-camel org.apache.camel-camel, com.redhat.fuse.eap-fuse-eap com.redhat.fuse.eap-fuse-eap, org.jboss.fuse.bom-jboss-fuse-parent org.jboss.fuse.bom-jboss-fuse-parentnot affected: vulnerable code not present
+1 more productsfewer
Red Hat JBoss Fuse Service Works 6 org.apache.camel-camel org.apache.camel-camel, com.redhat.fuse.eap-fuse-eap com.redhat.fuse.eap-fuse-eap, org.jboss.fuse.bom-jboss-fuse-parent org.jboss.fuse.bom-jboss-fuse-parent
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Sources
- CVE List CVE-2022-45046
- NVD CVE-2022-45046
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.