← לוח פגיעויות

CVE-2022-22576

גבוהה 8.1

תיאור (מקור, אנגלית)

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).

מדדים

CVSS 3.1
8.1 (HIGH) מקור הציון: NVD CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS — סבירות ניצול
3% (אחוזון 100) נכון ל-15/10/2026
CWE
CWE-287, CWE-306

מוצרים מושפעים

haxx: curl; debian: debian linux; netapp: clustered data ontap; netapp: solidfire \& hci management node; netapp: solidfire \& hci storage node; broadcom: fabric operating system; netapp: bootstrap os; netapp: hci compute node; netapp: h300s firmware; netapp: h300s; netapp: h500s firmware; netapp: h500s; netapp: h700s firmware; netapp: h700s; netapp: h410s firmware

קישורים