CVE-2022-40308

If anonymous read enabled, it's possible to read the database file directly without logging in.

• http://www.openwall.com/lists/oss-security/2022/11/15/2Mailing List, Third Party Advisory
• https://lists.apache.org/thread/x01pnn0jjsw512cscxsbxzrjmz64n4ccIssue Tracking, Mailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2022/11/15/2Mailing List, Third Party Advisory
• https://lists.apache.org/thread/x01pnn0jjsw512cscxsbxzrjmz64n4ccIssue Tracking, Mailing List, Vendor Advisory

Published

Nov 15, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-40302An issue was discovered in bgpd in FRRouting (FRR) through 8…6.5
• CVE-2022-40303An issue was discovered in libxml2 before 2.10.3. When parsi…7.5
• CVE-2022-40304An issue was discovered in libxml2 before 2.10.3. Certain in…7.8
• CVE-2022-40305A Server-Side Request Forgery issue in Canto Cumulus through…9.8
• CVE-2022-40306The login form /Login in ECi Printanista Hub (formerly FMAud…5.9
• CVE-2022-40307An issue was discovered in the Linux kernel through 5.19.8. …4.7
• CVE-2022-40309Users with write permissions to a repository can delete arbi…4.3
• CVE-2022-4031The Simple:Press plugin for WordPress is vulnerable to arbit…4.9
• CVE-2022-40310Authenticated (subscriber+) Race Condition vulnerability in …3.1
• CVE-2022-40311Auth. (admin+) Stored Cross-Site Scripting (XSS) in Fatcat A…4.8
• CVE-2022-40312Server-Side Request Forgery (SSRF) vulnerability in GiveWP G…6.5
• CVE-2022-40313Recursive rendering of Mustache template helpers containing …7.1