CVE-2022-27778
גבוהה 8.1
תיאור (מקור, אנגלית)
A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`.
מדדים
- CVSS 3.1
-
8.1 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H - EPSS — סבירות ניצול
- 4% (אחוזון 100) נכון ל-15/10/2026
- CWE
- CWE-706
מוצרים מושפעים
haxx: curl; netapp: active iq unified manager; netapp: clustered data ontap; netapp: oncommand insight; netapp: oncommand workflow automation; netapp: snapcenter; netapp: solidfire \& hci management node; netapp: h300s firmware; netapp: h300s; netapp: bh500s firmware; netapp: h500s; netapp: h700s firmware; netapp: h700s; netapp: h410s firmware; netapp: h410s
קישורים
- https://www.oracle.com/security-alerts/cpujul2022.html PatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpujul2022.html PatchThird Party Advisory
- https://hackerone.com/reports/1553598 ExploitThird Party Advisory
- https://hackerone.com/reports/1553598 ExploitThird Party Advisory
- https://security.netapp.com/advisory/ntap-20220609-0009/ Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220729-0004/ Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220609-0009/ Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220729-0004/ Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html