Not rated
CVE-2022-27776 A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie…
Description
A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| https://github.com/curl/curl | Versions not published | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
References
- hackerone.com hackerone.com
- security.netapp.com security.netapp.com
- DSA-5197 www.debian.org
- [debian-lts-announce] 20220828 [SECURITY] [DLA 3085-1] curl security update lists.debian.org
- FEDORA-2022-f83aec6d57 lists.fedoraproject.org
- FEDORA-2022-bca2c95559 lists.fedoraproject.org
- GLSA-202212-01 security.gentoo.org
Timeline
- Published
- Last modified