8.1
Élevée
CVE-2022-22576 An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse…
Description
An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| https://github.com/curl/curl | Versions non publiées | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
Références
- hackerone.com hackerone.com
- security.netapp.com security.netapp.com
- DSA-5197 www.debian.org
- [debian-lts-announce] 20220828 [SECURITY] [DLA 3085-1] curl security update lists.debian.org
- GLSA-202212-01 security.gentoo.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de https://github.com/curl/curl
Les 51 CVE de https://github.com/curl/curl →
CVE-2023-28322
An information disclosure vulnerability exists in…
5.3
Moyenne
CVE-2023-28319
A use after free vulnerability exists in…
7.5
Élevée
CVE-2023-28320
A denial of service vulnerability exists in…
5.9
Moyenne
CVE-2023-28321
An improper certificate validation vulnerability exists in…
5.9
Moyenne