← Vulnerability feed

Vulnerability record · CVE-2022-2457 · published 10 August 2022

CVE-2022-2457: Redhat process automation manager improper restriction of authentication attempts vulnerability

Redhat · Process Automation Manager

A flaw was found in Red Hat Process Automation Manager 7 where an attacker can benefit from a brute force attack against Administration Console as the application does not limit the number of unsuccessful login attempts.

9.8 CVSS 3.1 Critical EPSS 0.59% · top 53.6% CWE-307 · Improper restriction of authentication attempts
9.8CVSS 3.1 base score
0.59%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

A flaw was found in Red Hat Process Automation Manager 7 where an attacker can benefit from a brute force attack against Administration Console as the application does not limit the number of unsuccessful login attempts.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://bugzilla.redhat.com/show_bug.cgi?id=2107990#c0 Issue TrackingVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2107990#c0 Issue TrackingVendor Advisory

Track CVE-2022-2457 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.2CVE-2022-2458Redhat process automation manager xml injection vulnerabilityXML external entity injection(XXE) is a vulnerability that allows an attacker to interfere with an application's processing of XML data. This attack …EPSS 0.78%8.1CVE-2023-4853Quarkus incorrect authorization vulnerabilityA flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulti…EPSS 1.4%6.5CVE-2019-14886Redhat decision manager cleartext storage of sensitive data vulnerabilityA vulnerability was found in business-central, as shipped in rhdm-7.5.1 and rhpam-7.5.1, where encoded passwords are stored in errai_security_context…EPSS 0.29%6.4CVE-2025-58713Redhat process automation manager incorrect default permissions vulnerabilityA container privilege escalation flaw was found in certain Red Hat Process Automation Manager images. This issue stems from the /etc/passwd file bein…EPSS 0.15%

Source: NIST National Vulnerability Database (record CVE-2022-2457), CISA KEV, FIRST EPSS (scores of 2026-10-02). This page is refreshed as NVD updates the record.