CVE:CVE-2022-24407
CNNVD:CNNVD-202202-1766
Cyrus Sasl是The Cyrus Team团队的一种简单身份验证。使应用程序开发人员可以轻松地将身份验证机制以通用方式集成到应用程序中。
Cyrus SASL 存在SQL注入漏洞，该漏洞源于 Cyrus SASL SQL 插件错误地处理了 SQL 输入。远程攻击者可以利用此问题执行任意 SQL 命令。
solution:Upgrade cyrusimap cyrus-sasl to a higher version than 2.1.27,and avoid the version [2.1.17,2.1.27]; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade fedoraproject fedora to a higher version than 34,35,36,and avoid the version 34,35,36; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade oracle communications_cloud_native_core_console to a higher version than 22.2.0,and avoid the version 22.2.0; Upgrade oracle communications_cloud_native_core_network_function_cloud_native_environment to a higher version than 22.2.0,and avoid the version 22.2.0; Upgrade oracle communications_cloud_native_core_security_edge_protection_proxy to a higher version than 22.1.1,and avoid the version 22.1.1