CVE-2022-37397

HIGH · CVSS 8.3 EPSS 0.78%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-08-12 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-37397

Severity

HIGH

CVSS

8.3

EPSS

0.78%

Microsoft

Original NVD Description

An issue was discovered in the YugabyteDB 2.6.1 when using LDAP-based authentication in YCQL with Microsoft’s Active Directory. When anonymous or unauthenticated LDAP binding is enabled, it allows bypass of authentication with an empty password.