[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCU5vS1d8A3D_kej2H-raeG0ZqtMJbU8Gt4Bl6yUvNlc":3,"g5a-risk:CVE-2022-4304":171},{"success":4,"data":5,"meta":168},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":35,"epssPercentile":26,"epssTimeSeries":36,"severity":38,"affectedProducts":39,"affectedProductsCount":54,"references":55,"referencesCount":73,"weaknesses":74,"weaknessesCount":83,"isActivelyExploited":84,"cisaInfo":26,"otxData":26,"relatedBlogPosts":85,"seoMetadata":86,"configurations":111,"relatedVendorCves":159,"notableEvents":160},"CVE-2022-4304","What is CVE-2022-4304?","A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.","A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleich...","2023-02-08T20:15:23.887","2025-11-04T20:16:14.897",5.9,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":33,"CVSSMetricV2":34,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",null,2.2,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[],0.23509,[37,37,37,37,37,35,35],0.16195,"Medium",[40,44,48,51],{"vendor":41,"product":41,"version":42,"criteria":43,"vulnerable":4},"openssl","*","cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":42,"criteria":47,"vulnerable":4},"stormshield","endpoint_security","cpe:2.3:a:stormshield:endpoint_security:*:*:*:*:*:*:*:*",{"vendor":45,"product":49,"version":42,"criteria":50,"vulnerable":4},"sslvpn","cpe:2.3:a:stormshield:sslvpn:*:*:*:*:*:*:*:*",{"vendor":45,"product":52,"version":42,"criteria":53,"vulnerable":4},"stormshield_network_security","cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",4,[56,60,65,69,71],{"url":57,"source":58,"tags":59},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202402-08","Gentoo",[],{"url":61,"source":62,"tags":63},"https:\u002F\u002Fwww.openssl.org\u002Fnews\u002Fsecadv\u002F20230207.txt","Openssl",[64],"Vendor Advisory",{"url":66,"source":67,"tags":68},"https:\u002F\u002Fpsirt.global.sonicwall.com\u002Fvuln-detail\u002FSNWLID-2023-0003","Sonicwall",[],{"url":57,"source":58,"tags":70},[],{"url":61,"source":62,"tags":72},[64],5,[75],{"id":76,"name":77,"description":78,"extendedDescription":79,"status":80,"abstraction":81,"structure":82},"CWE-203","Observable Discrepancy","The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.","Discrepancies can take many forms, and variations may be detectable in timing, control flow, communications such as replies or requests, or general behavior. These discrepancies can reveal information about the product's operation or internal state to an unauthorized actor. In some cases, discrepancies can be used by attackers to form a side channel.","Incomplete","Base","Simple",1,false,[],{"title":87,"metaDescription":88,"keywords":89,"canonicalUrl":90,"structuredData":91},"What is CVE-2022-4304? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-4304, a medium severity cyber security vulnerability from 2023. A timing based side channel exists in the OpenSSL RSA Decr...","CVE-2022-4304, CVE-2022-4304 vulnerability, CVE-2022-4304 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, openssl security, stormshield security, openssl vulnerability, endpoint_security vulnerability, sslvpn vulnerability, stormshield_network_security vulnerability","\u002Fwhat-is\u002Fcve-2022-4304",{"@context":92,"@type":93,"headline":87,"description":88,"datePublished":10,"dateModified":11,"author":94,"publisher":98,"about":102,"mainEntityOfPage":106,"articleSection":109,"keywords":110},"https:\u002F\u002Fschema.org","TechArticle",{"@type":95,"name":96,"url":97},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":95,"name":96,"url":97,"logo":99},{"@type":100,"url":101},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":103,"name":6,"description":104,"additionalType":105},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":107,"@id":108},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-4304","Cybersecurity","CVE-2022-4304, CVE-2022-4304 vulnerability, CVE-2022-4304 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[112,129],{"Operator":26,"Negate":26,"Nodes":113},[114],{"Operator":115,"Negate":84,"CPEMatch":116},"OR",[117,121,125],{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":118,"VersionStartExcluding":26,"VersionStartIncluding":119,"VersionEndExcluding":120,"VersionEndIncluding":26},"70985D55-A574-4151-B451-4D500CBFC29A","1.0.2","1.0.2zg",{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":122,"VersionStartExcluding":26,"VersionStartIncluding":123,"VersionEndExcluding":124,"VersionEndIncluding":26},"DE0061D6-8F81-45D3-B254-82A94915FD08","1.1.1","1.1.1t",{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":126,"VersionStartExcluding":26,"VersionStartIncluding":127,"VersionEndExcluding":128,"VersionEndIncluding":26},"A6DC5D88-4E99-48F2-8892-610ACA9B5B86","3.0.0","3.0.8",{"Operator":26,"Negate":26,"Nodes":130},[131],{"Operator":115,"Negate":84,"CPEMatch":132},[133,136,139,143,147,151,155],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":134,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":135,"VersionEndIncluding":26},"166DF690-041D-4585-A9DA-A6CC72A6A7F3","7.2.40",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":137,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":138,"VersionEndIncluding":26},"DA7E0DD2-D62E-4735-A2C9-47C463BE4AA9","3.2.1",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":140,"VersionStartExcluding":26,"VersionStartIncluding":141,"VersionEndExcluding":142,"VersionEndIncluding":26},"27B77023-4983-4D33-9824-A120A5ED31BD","2.7.0","2.7.11",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":144,"VersionStartExcluding":26,"VersionStartIncluding":145,"VersionEndExcluding":146,"VersionEndIncluding":26},"8BD398C8-BC0B-4ED5-B71A-B9C6D8F63659","2.8.0","3.7.34",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":148,"VersionStartExcluding":26,"VersionStartIncluding":149,"VersionEndExcluding":150,"VersionEndIncluding":26},"31B59634-B59C-4391-96D3-200A86A6CE3E","3.8.0","3.11.22",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":152,"VersionStartExcluding":26,"VersionStartIncluding":153,"VersionEndExcluding":154,"VersionEndIncluding":26},"F7794B42-8235-4C75-866F-5D0A405F0989","4.0.0","4.3.16",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":156,"VersionStartExcluding":26,"VersionStartIncluding":157,"VersionEndExcluding":158,"VersionEndIncluding":26},"C8A23A5D-928A-4225-9C93-31E5DFE215A7","4.4.0","4.6.3",[],[161],{"id":162,"eventType":163,"eventTime":164,"details":165,"label":166,"color":167},"79785820-b1f6-4177-9c99-abfce215fc45","HIGH_EPSS_DELTA","2026-06-16T04:05:18.032827+00:00","Daily EPSS score increased by 0.160 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":169,"version":170},1792243691640,"2.0",{"score":172,"band":38,"action":173,"scoredAt":174},43,"Plan remediation","2026-10-16T06:57:05.54716+00:00"]