CVE-2022-46505: XSS
Published Jan 18, 2023
·Updated
An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero MasterSecret that can decrypt secret data.
Affected Software
1 affected component
MatrixSSL MatrixSSL<=4.5.1
Event History
Jan 18, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-46505?
CVE-2022-46505 has a critical severity level due to its potential to allow unauthorized decryption of sensitive data.
2
Which versions of MatrixSSL are affected by CVE-2022-46505?
CVE-2022-46505 affects MatrixSSL versions 4.5.1-open and earlier.
3
How do I fix CVE-2022-46505?
To fix CVE-2022-46505, you should upgrade to the latest version of MatrixSSL that addresses this vulnerability.
4
What type of issue is identified in CVE-2022-46505?
CVE-2022-46505 is a security issue that involves improper handling of the SessionID field in MatrixSSL.
5
What can an attacker achieve by exploiting CVE-2022-46505?
Exploiting CVE-2022-46505 allows attackers to misuse an all-zero MasterSecret for decrypting protected data.