PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›CVE-2022-29869

CVE-2022-29869

cifs-utils: crafted input may cause an information leak

Loading…

Severity

Low

Red Hat Product Security

4.3

CVSS 3.1

Review impact separately from score.

Published · April 28, 2022

Updated · November 22, 2025

Description

A flaw was found in cifs-utils. When verbose logging is enabled, invalid credentials file lines may be dumped to stderr. This may lead to information disclosure in particular conditions when the credentials file given is sensitive and contains '=' signs.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CWE-20 · Improper Input Validation