Beveiligingsadvies

CVE-2022-39360

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-10-26 00:00:00

Laatst bijgewerkt 2025-04-23 16:42:39

Toegewezen door GitHub_M

CVSS-score 6.5

Status PUBLISHED

Beschrijving

Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1.41.9 single sign on (SSO) users were able to do password resets on Metabase, which could allow a user access without going through the SSO IdP. This issue is patched in versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1.41.9. Metabase now blocks password reset for all users who use SSO for their Metabase login.

← Alle CVE's bekijken Bekijk op cve.org ↗