CVE-2022-21950

A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openSUSE Backports SLE-15-SP4 allows local users to hijack the UNIX domain socket This issue affects: openSUSE Backports SLE-15-SP3 canna versions prior to canna-3.7p3-bp153.2.3.1. openSUSE Backports SLE-15-SP4 canna versions prior to 3.7p3-bp154.3.3.1. openSUSE Factory was also affected. Instead of fixing the package it was deleted there.

• CWE-284

• https://bugzilla.suse.com/show_bug.cgi?id=1199280Issue Tracking, Vendor Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1199280Issue Tracking, Vendor Advisory

Published

Sep 7, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-21944A UNIX Symbolic Link (Symlink) Following vulnerability in th…7.8
• CVE-2022-21945A Insecure Temporary File vulnerability in cscreen of openSU…6.1
• CVE-2022-21946A Incorrect Permission Assignment for Critical Resource vuln…5.3
• CVE-2022-21947A Exposure of Resource to Wrong Sphere vulnerability in Ranc…8.8
• CVE-2022-21948An Improper Neutralization of Input During Web Page Generati…6.1
• CVE-2022-21949A Improper Restriction of XML External Entity Reference vuln…8.8
• CVE-2022-21951A Cleartext Transmission of Sensitive Information vulnerabil…6.8
• CVE-2022-21952A Missing Authentication for Critical Function vulnerability…7.5
• CVE-2022-21953A Missing Authorization vulnerability in of SUSE Rancher all…8.8
• CVE-2022-21954Microsoft Edge (Chromium-based) Elevation of Privilege Vulne…6.1
• CVE-2022-21957Microsoft Dynamics 365 On-Premises Remote Code Execution Vul…7.2
• CVE-2022-21958Windows Resilient File System (ReFS) Remote Code Execution V…6.8