IM
IronMonkey Threat Research

CVE-2022-27776 MEDIUM

Published: 2022-06-02 | Last Modified: 2024-11-21 | Status: Modified

Description

A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.

Additional Descriptions (1)

Una vulnerabilidad de credenciales insuficientemente protegidas fijada en curl versión 7.83.0, podría filtrar datos de autenticación o de encabezados de cookies en redireccionamientos HTTP al mismo host pero con otro número de puerto

CVSS Metrics

Base Score: 6.5 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactNONE
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 2.8

Impact Score: 3.6

Base Score: 4.3 (MEDIUM)

AV:N/AC:M/Au:N/C:P/I:N/A:N

Access VectorNETWORK
Access ComplexityMEDIUM
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactNONE
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 8.6

Impact Score: 2.9

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-522
[email protected] Primary
en CWE-522

Affected Products

Vendor Product Version Update Type
haxx curl * <built-in method update of dict object at 0x7fd34019c600> Application
fedoraproject fedora 36 <built-in method update of dict object at 0x7fd3408900c0> Operating System
fedoraproject fedora 37 <built-in method update of dict object at 0x7fd34b9c0940> Operating System
debian debian_linux 10.0 <built-in method update of dict object at 0x7fd385055d00> Operating System
debian debian_linux 11.0 <built-in method update of dict object at 0x7fd31b20cb40> Operating System
netapp hci_bootstrap_os - <built-in method update of dict object at 0x7fd368e88d40> Operating System
netapp clustered_data_ontap - <built-in method update of dict object at 0x7fd385054380> Application
netapp solidfire_\&_hci_management_node - <built-in method update of dict object at 0x7fd36945e200> Application
netapp solidfire_\&_hci_storage_node - <built-in method update of dict object at 0x7fd36b175780> Application
brocade fabric_operating_system - <built-in method update of dict object at 0x7fd34019c380> Operating System
netapp h300s_firmware - <built-in method update of dict object at 0x7fd36a656b80> Operating System
netapp h500s_firmware - <built-in method update of dict object at 0x7fd340892a40> Operating System
netapp h700s_firmware - <built-in method update of dict object at 0x7fd3854bd8c0> Operating System
netapp h410s_firmware - <built-in method update of dict object at 0x7fd36a6572c0> Operating System
splunk universal_forwarder * <built-in method update of dict object at 0x7fd34b9c33c0> Application
splunk universal_forwarder * <built-in method update of dict object at 0x7fd36a657b00> Application
splunk universal_forwarder 9.1.0 <built-in method update of dict object at 0x7fd384e78380> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:hci_bootstrap_os:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:solidfire_\&_hci_storage_node:-:*:*:*:*:*:*:*
Yes cpe:2.3:o:brocade:fabric_operating_system:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*

References