VYPR
← All advisories
High severity7.1NVD Advisory· Published Nov 9, 2022· Updated Jun 17, 2026

CVE-2022-31253

CVE-2022-31253

Description

A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap user or group to change ownership of arbitrary directory entries to this user/group, leading to escalation to root. This issue affects: openSUSE Factory openldap2 versions prior to 2.6.3-404.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • OpenSUSE/openldap22 versions
    cpe:2.3:a:opensuse:openldap2:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:opensuse:openldap2:*:*:*:*:*:*:*:*range: <2.6.3-404.1
    • (no CPE)range: <2.6.3-404.1
  • OpenSUSE/Factorycpe-rescue
    Range: openldap2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.