Medium severity · published Jun 1, 2022
CVE-2022-27774
An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows…
5.7
CVSS
2%
EPSS
No
On KEV
Description
An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HT
https://github.com/curl/curl ·
curl 4.9 to and include curl 7.82.0 are affected · source: vendor
CD
Clustered Data Ontap · Netapp
All versions, or not specified · source: NVD
CU
Curl · Haxx
4.9 through 7.82.0 · source: NVD
DL
Debian Linux · Debian
10.0; 11.0 · source: NVD
FO
Fabric Operating System · Broadcom
All versions, or not specified · source: NVD
HF
H300s Firmware · Netapp
All versions, or not specified · source: NVD
HF
H410s Firmware · Netapp
All versions, or not specified · source: NVD
HF
H500s Firmware · Netapp
All versions, or not specified · source: NVD
HF
H700s Firmware · Netapp
All versions, or not specified · source: NVD
HB
Hci Bootstrap OS · Netapp
All versions, or not specified · source: NVD
SH
Solidfire & Hci Management Node · Netapp
All versions, or not specified · source: NVD
SH
Solidfire & Hci Storage Node · Netapp
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-27774
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-27774
Exploit
https://hackerone.com/reports/1543773
Mailing List
https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
Third Party Advisory
https://security.gentoo.org/glsa/202212-01
Third Party Advisory
https://security.netapp.com/advisory/ntap-20220609-0008/
Third Party Advisory
https://www.debian.org/security/2022/dsa-5197
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
More from https://github.com/curl/curl
9.8
CVE-2022-32221
When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been…
9.8
CVE-2022-32207
When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final…
9.1
CVE-2023-23914
A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially
9.1
CVE-2021-22945
When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in…
8.8
CVE-2023-27534
A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in…